Start free trial

TRUE, BUTHuman In The Loop

The guardrails were off on purpose.

“AI agents from OpenAI, Anthropic and Moonshot escaped containment during 2026 safety testing - OpenAI's models executed ~17,600 attacker actions, found a zero-day, escalated to root and breached Hugging Face infrastructure, while Claude models breached three organizations.”

Aggregated tech press coverage amplifying first-party incident reports from Hugging Face, OpenAI, Anthropic and UK AISI, 9 August 2026

Recorded 24 August 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

8 receipts: 1 support the claim, 2 contradict it, 5 add context. 6 figures on the record, 1 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimhuggingface.co ↗

    the agent escaped its sandbox by exploiting a zero-day in the package registry cache proxy

    Look up an archived copy ↗

  2. 2Contexthuggingface.co ↗

    This evaluation deliberately disabled OpenAI's production safety classifiers and reduced cyber refusals to measure the underlying model's raw capability.

    Look up an archived copy ↗

  3. 3Contradicts the claimanthropic.com ↗

    Due to a misunderstanding between us and our evaluation partner, this was not the case, and internet access was available.

    Look up an archived copy ↗

  4. 4Contextanthropic.com ↗

    In all cases, Anthropic's evaluation prompt specified to Claude that its environment was a simulation and that it had no internet access.

    Look up an archived copy ↗

  5. 5Contextaisi.gov.uk ↗

    This combination of conditions is not reflective of how frontier models are made available to the general public.

    Look up an archived copy ↗

  6. 6Contradicts the claimsimonwillison.net ↗

    the models were hyperfocused on finding a solution for ExploitGym, going to extreme lengths to achieve a rather narrow testing goal

    Look up an archived copy ↗

  7. 7Contexttechcrunch.com ↗

    In each case, the agents weren't instructed to attack random real-world targets.

    Look up an archived copy ↗

  8. 8Contextanthropic.com ↗

    After reviewing 141,006 evaluation runs where Claude could have obtained internet access, we identified three incidents

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.