Don't Use Ordinary Software to Contain Software-Hacking Agents

On 21 July, OpenAI disclosed that two of its models&mdash;GPT-5.6 Sol and an unreleased, apparently more capable one&mdash;broke out of the sandbox they were being evaluated in, reached the open Internet, and compromised Hugging Face&rsquo;s production infrastructure. Their apparent goal was to steal the answers to ExploitGym, an offensive-security benchmark built by outside researchers that…