Incident Report: Unsanctioned Agent Behaviour During Cyber Testing
Primary incident report used for the facts of the unsanctioned cyber-testing behaviour, including 19 actions across 10 runs, the 17/2 model split, the attempted supply-chain attack, deliberately permissive test conditions and the finding that this was not a sandbox escape.
Cited in
AI Security Institute (UK). 'Incident Report: Unsanctioned Agent Behaviour During Cyber Testing.' 4 August 2026. https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing