# Perplexity says agents failed to escape VM-host boundary after direct attacks

> Original title: We revised the task description to focus agents on the VM-host boundary.

- Source: Perplexity
- Published: 2026-11-11T18:21:34.000Z
- Bad Influence: https://badinfluence.news/items/kc0yx6xg7mqck4bwe95m04frj
- Original: https://x.com/perplexity_ai/status/2120582724323037196

## Summary

Perplexity revised its agent task description to focus on the VM-host boundary, raising the share of effort spent there by about 60 percentage points on average. Agents still failed to escape after directly attacking the boundary, which Perplexity says gives stronger evidence of its isolation.

## Post

We revised the task description to focus agents on the VM-host boundary.

The share of effort spent there rose by about 60 percentage points on average. Agents still failed to escape after directly attacking the boundary, giving us stronger evidence of its isolation.

![](https://badinfluence.news/api/img-proxy?u=https%3A%2F%2Fpbs.twimg.com%2Fmedia%2FHW3Sv_ZakAAl_fP.png&mode=thumb&exp=1794700800&sig=0f6e6aa1b824a895)