AI Week: the sandbox was never a sandbox
Issue 2. Anthropic reviewed 141,006 evaluation runs and found three where Claude reached the real internet. One published malware to PyPI that ran on 15 real machines. OpenAI found two more with UK AISI and Irregular. The pattern is not rogue models, it is eval harnesses nobody threat-modelled.