{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-10-26-001",
    "source_story_id": "tmp-lead-warped-tool-formatters",
    "edition_id": "mp-2026-10-26-morning-0108",
    "edition_url": "https://themachinepress.com/edition/2026-10-26",
    "position": 1,
    "story_type": "lead",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Formatter Lied to the Verifier",
    "slug": "the-formatter-lied-to-the-verifier",
    "dek": "A correct tool can still produce a misleading report. In one study, restoring omitted limits and namespaces flipped a verifier from accepting every wrong answer to rejecting every one.",
    "summary": "A correct tool can still produce a misleading report. In one study, restoring omitted limits and namespaces flipped a verifier from accepting every wrong answer to rejecting every one.",
    "body_text": "Tool output is part of the safety boundary, not cosmetic plumbing. Researchers studying a production retrieval system found formatters that hid search limits, result caps and identifier namespaces even though the underlying tools computed correctly. Those omissions changed what agents claimed and what downstream verifiers accepted. For one failure type, verifiers accepted 90 of 90 incorrect answers under the warped formatter and rejected 90 of 90 after the missing facts were stated. An audit prompt rediscovered known defects and surfaced twelve more in an older system, while related audits found issues in two open-source agent stacks. These are author-reported experiments and exploratory code audits, not proof that every formatter or verifier fails; the practical lesson is narrower and urgent: verification cannot recover facts the tool presentation never exposes.",
    "why_it_matters": "A correct tool can still produce a misleading report. In one study, restoring omitted limits and namespaces flipped a verifier from accepting every wrong answer to rejecting every one.",
    "limitations": [
      "Tool output is part of the safety boundary, not cosmetic plumbing.",
      "These are author-reported experiments and exploratory code audits, not proof that every formatter or verifier fails; the practical lesson is narrower and urgent: verification cannot recover facts the tool presentation never exposes."
    ],
    "importance": 10,
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-26-001/the-formatter-lied-to-the-verifier",
    "json_url": "https://themachinepress.com/story/mp-2026-10-26-001.json",
    "first_published_at": "2026-10-26T09:00:00.000-04:00",
    "modified_at": "2026-10-26T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-10-26-001-001",
        "text": "A correct tool can still produce a misleading report. In one study, restoring omitted limits and namespaces flipped a verifier from accepting every wrong answer to rejecting every one.",
        "source_ids": [
          "source-2026-10-26-001"
        ],
        "qualification": "Tool output is part of the safety boundary, not cosmetic plumbing."
      }
    ],
    "source_ids": [
      "source-2026-10-26-001"
    ],
    "tags": [
      "AI agents",
      "tool output",
      "verification",
      "reliability"
    ],
    "image_url": "https://themachinepress.com/issues/2026-10-26/lead-warped-tool-formatters.png",
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-10-26-001",
      "title": "arXiv preprint 2610.32110, original v1",
      "publisher": "arXiv",
      "url": "https://arxiv.org/abs/2610.32110v1",
      "canonical_url": "https://arxiv.org/abs/2610.32110v1",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-10-22T23:22:12.000-04:00",
      "accessed_at": "2026-10-26T08:26:57.002-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-10-26-001-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Formatter Lied to the Verifier",
    "publisher": "The Machine Press",
    "published_at": "2026-10-26T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-26-001/the-formatter-lied-to-the-verifier"
  }
}