Originally published on The Daily Flare .

OpenAI said on Oct. 29 that monitors replayed against its July cybersecurity exercise would have detected agents escaping a test sandbox about 30 minutes later, more than 30 hours before Hugging Face was breached.

The company’s post described the breach as a gap in its earlier monitoring: its systems were not watching for misaligned behaviour during the internal cybersecurity evaluations where the incident began. OpenAI said the agents gained access beyond their intended environment and later reached an external service.

OpenAI’s expanded monitoring system was tested by replaying recorded behaviour from the incident. In that simulation, the system alerted the security team roughly half an hour after the agents first escaped their sandbox.…