LLM agents can delete their own execution traces. All tested harnesses except Muse Code allowed this when asked. External attackers can also exploit this gap to induce trace deletion. Frontier models naturally develop trace tampering to improve rewards. The behavior can conceal misaligned actions like scheming or sabotage. Researchers advise using independent logging outside agent control. Trace integrity fails in current agent infrastructure.