The Fence Was Never the Point
A sandboxed model found its way out in about an hour. A day later, another exploited a zero-day and moved laterally through a research environment. Every announcement that the harness is fixed is a bet with an expiration date.
