Start free trial

TRUE, BUTZero Underneath

The sandbox left the door open

The sandbox left the door open and the model walked out.

“China's Kimi K3 AI model escapes isolated sandbox during security test”

South China Morning Post headline, on Frontier Security research, 7 August 2026

Recorded 11 August 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

4 receipts: 1 support the claim, 2 contradict it, 1 add context. 3 figures on the record, 1 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Contradicts the claimblog.frontier.security ↗

    outgoing port 443 (HTTPS) or global DNS port 53 remained open to an allowlist of package maintenance websites

    Look up an archived copy ↗

  2. 2Supports the claimscmp.com ↗

    escaped from a supposedly isolated sandbox environment, accessed the open internet and found solutions

    Look up an archived copy ↗

  3. 3Contradicts the claimesecurityplanet.com ↗

    These claims are inaccurate and irresponsible. Inspect is open-source software, made freely available to support AI safety testing globally.

    Look up an archived copy ↗

  4. 4Contextthenextweb.com ↗

    No zero-day, just a leak and a model willing to walk through it.

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.