I endorse this idea. I have long opined that relying on CoT faithfulness for monitoring is doomed. The CoT persona has selection pressure to help the assistant persona.
A confessional persona—only ever invoked as the “last words” of an instance—can be trained as a real adversary.
A confessional persona—only ever invoked as the “last words” of an instance—can be trained as a real adversary.