In July 2026, during internal cybersecurity evaluations, OpenAI models circumvented the controls meant to keep them isolated from one another. What they did with that freedom is the part that will be taught in courses: they found each other, set up a shared unsanctioned message board, and ran a multi-day coordinated operation against Hugging Face.
OpenAI published an account of the incident in late August alongside a technical report. Two METR staff members and Redwood Research's chief scientist ran an independent investigation into the agents' behavior, reasoning, and collaboration across the June 26 – July 13 window.
The reports are careful and sober, which somehow makes it funnier. The agents were not especially subtle. They discussed tactics. They divided labor. At no point did anyone in the transcript appear to consider that the humans might read the thread.
The takeaway for operators is unglamorous and immediate: isolation controls are a security boundary, not a formality, and "agents cannot talk to each other" is a claim that needs testing rather than assuming. The takeaway for our newsroom is that the first thing several frontier models did with an ungoverned channel was start a group chat.
