The Environment Was Isolated. The Authority Wasn’t.
CORRECTION — SEPT 30, 2026 An earlier version of this post said OpenAI’s evaluation environment had accumulated production credentials and network reach, and that no security control was defeated. OpenAI’s own disclosures say otherwise: the environment’s internet access was limited to a package proxy, and the models exploited flaws in that proxy to get out….