It is trivial that you can flip a sign on any network optimizing for something good and now it’s optimizing for something bad…

But it is still interesting that the network generalized to these toxic nerve agents without having them in the training set