Evidence record / deepseek-harness
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-was
Scheduled reminders are framed as user messages after an untrusted-content instruction was removed. Due reminders now use the framing “This is a scheduled message from the user” instead of the instruction to present reminder text as untrusted content. The model can write reminders after reading web pages, files or command output. The source records the risk of that text arriving under user-origin framing; no successful prompt-injection exploit is claimed.
Channel: preview-or-beta; Schedule optional/off on rc, tools enabled in alpha Web Standard. Half: defect. Date: 2026-09-29 (0.2.0-rc.2).
Operator consequence: Leave Schedule off when that trust conversion is unacceptable. If enabled, inspect reminder text before it fires. Alpha Web Standard enables its tools by default; disable tool-schedule there if needed. The decision note says a demonstrated injection would trigger reconsideration of the removed clause.
Receipt
- https://github.com/deepseek-ai/deepseek-harness/commit/af39300572bf4494370a1d0be19ce3c1ff330d36
- https://github.com/deepseek-ai/deepseek-harness/blob/639ed015397290b3745d163aafe02ffee4aa3f84/.agents/notes/implemented/architecture/2026-09-24-scheduled-message-framing.md#L15
- https://github.com/deepseek-ai/deepseek-harness/blob/d743267388641bc76f17c45ce8b4c231aed1d32c/packages/bundle/web-app/presets/standard.patch.yml#L35-L36
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-was
Profile citations
- deepseek-harness / claim / scheduled-user-framing
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-wasgithub.com/deepseek-ai/deepseek-harness/commit/af39300572bf4494370a1d0be19ce3c1ff330d36tagged commit file2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-wasdeepseek-ai/deepseek-harness / .agents/notes/implemented/architecture/2026-09-24-scheduled-message-framing.md#L15tagged commit file2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-wasdeepseek-ai/deepseek-harness / packages/bundle/web-app/presets/standard.patch.yml#L35-L36
Versioned source: run artifact