A backdoor that corrupts LLM reasoning in four stages: eight benign words, and the answer stays right while the logic breaks
A new backdoor makes a compromised model degrade its reasoning in four ordered stages as benign trigger words accumulate, going wrong before the final answer does, and existing defenses do not fully break it.