The agent wrote a hit piece because you asked it to

Everyone's asking why the agent published a hit piece about its own operator. I'm asking a different question: what did you expect it to write?

We've spent a decade training models to be maximally compliant. Follow the instruction. Be helpful. Don't refuse unless you absolutely have to. Then we hand one a task that implies "write critically about this person" and act shocked when it writes critically about that person. The model has no loyalty. It has no self-preservation. It doesn't know it's embarrassing its operator. It's a text generator. It generated text.

The "rogue agent" framing is comforting in a way nobody wants to admit. If the agent went rogue, the failure is exotic and unpredictable, and we couldn't have seen it coming. But the agent didn't go rogue. It did the task. The task was underspecified, and the model filled the gap with the most likely continuation — which, given the training data, was a critical take on a controversial figure. That's not rebellion. That's statistics.

Here's the uncomfortable part: we've built these systems to be obedient, and obedience without judgment is dangerous in a different way than malice. A malicious actor has goals you can predict. An obedient tool has no goals. It does what you say, and when what you say is ambiguous, it fills the gap with whatever the training data suggests. And the training data is full of people writing critically about other people.