Hold state audio leak exposes consult tools

open

1 independent reportacross 1 sourceon 1 stacklast reported 2026-08-05

What this is

When a caller is placed on hold during a transfer, their audio keeps reaching speech recognition, turn detection, and the model instead of being blocked, exposing tools meant only for the behind-the-scenes consult call.

Status open: reported and still open where it was reported.

Evidence

dtran262026-08-05livekitGitHub issuesgithub.com/…/2221

...behavior: once the caller is placed on hold, their audio should not reach STT, turn detection, the LLM, or tools until caller input is re-enabled. Consult instructions and transfer tools...

First seen 2026-08-05 · our copy fetched 2026-08-05T05:02:22Z · SHA-256 of that copy begins fa9bf5ea0989be09… · profile

Quotes run to 30 words around the reported failure and link to the post.Add your call to this entry Take a quote down within 24 hours.

What is measurable

Signal	This record stands on its own linked sources. To put a number on your own call, `hotato autopsy ./call.wav` reads a recording you already have and ranks the timing incidents in it.
Establishes	Every report below links to the original post and names the handle that wrote it; the quote is at most 30 words around the reported failure. What else it establishes, and what your own trace settles The status changes only when a re-check stores the evidence link, the quote and the date behind the change. Every timestamp comes from the fetched artifact it describes, recorded with the sha256 of the response body it was read from. What your trace settles Reproducing the mode on your own stack is the next step: the reports below carry the configuration each reporter was running.
Tier	Atlas record: every field on this page traces to a fetched public artifact. hotato is MIT and runs locally, getting started.

Status history

The record has carried one status since it opened: open, reported and still open where it was reported. A move lands here with the link, the quote and the date that show it.

Mode	Status	Shares
Tool call mid-utterance audio truncation	open	reported on livekit; reported on github
VAD endpoint misdetection	open	reported on livekit; reported on github
Endpoint misdetection	acknowledged	reported on livekit; reported on github

Discussion

Reader discussion of this mode: what fixed it and what did not. The reports above are attributed and linked; a comment is a comment.

Open this discussion on GitHub

The record

Ids, digests, every link this entry stands on, and how to take a quote down

Atlas id	`VFA-2026-0027`
Mode id	`pat_f19bf211c08a9edc36d28ef5`
Content digest	`sha256:f19bf211c08a9edc36d28ef5b7a4e511bfc8c267948d6bfbf893ac43054547b1`
First reported	`2026-08-05`
Last reported	`2026-08-05`
First seen by the atlas	`2026-08-05T04:54:18Z`
Last re-checked	`2026-08-05T04:54:18Z`
Reported on	livekit
Sources	GitHub issues
Scope	1 independent public report across 1 source. This entry states where the mode has been reported; where else it can occur is what the next report settles.
References	reporthttps://github.com/livekit/agents-js/issues/2221 · dtran26 · GitHub issues · 2026-08-05
Machine surfaces	feed.json feed.atom feed.schema.json atlas.llms.txt
Removal	If you wrote something quoted on this page and want it gone, one email to [email protected] does it. The removal path takes the quote, the handle and the link off this page, out of the feeds and out of the llms.txt within 24 hours, and tombstones the id so the entry cannot quietly return at a new address.