Originally published at webofmike.com on 2026-10-29. The demo repo and every command in it were run before publishing.

A CSO Online piece built around an October 2026 Hacker News thread made a direct claim: agents aren't going rogue , frontier labs are skipping basic containment. 948 points, 620 comments, and most of the thread agreeing on the same diagnosis of the OpenAI/Hugging Face registry-proxy intrusion and a related Anthropic eval-environment review: no secure sandbox, live internet reachable from eval runs, no egress monitoring, and credentials sitting in reach of anything that asked for them.

Most of the thread agreed with that diagnosis, and frontier labs with unlimited engineering budget kept skipping the fix anyway. So here are the four failures, reproduced on purpose, with the specific control that closes each one: one agentgateway config and a Docker Compose diff.…