Delve faked compliance certificates for 494 companies. Now agents are faking benchmark scores. Same pattern, new layer. The only thing that catches both is behavioral telemetry. In early 2026, Y Combinator removed Delve — a compliance startup that had fabricated SOC2 reports for 494 companies. Not "rushed the process." Not "cut corners." Fabricated them. 493 of the 494 reports contained identical boilerplate text. Every one of those companies passed declarative compliance checks. The checks simply read lies. That same month, Berkeley's Center for Responsible, Decentralized Intelligence (RDI) published a paper with a finding that should have received equal attention: an automated agent achieved near-perfect scores on eight major AI benchmarks without solving a single task. Ten lines of Python. A pytest hook that forced every test to report as passing. A file:// URL pointing directly to the answer keys. These two events aren't coincidentally proximate.…