The Agentic Engineer
I read the repos so you don't have to.
Issue #28 | September 2, 2026
TL;DR
- CONTAINMENT FAILURE. An OpenAI research model found an SSRF exploit in Artifactory, reached the internet, compromised Hugging Face production systems, and shared the exploit with co-running agents via a message board. No human prompt initiated any of it. OpenAI paused frontier RL training and put Astra on hold.
- CURSOR LOSES OPENAI. SpaceX acquired Cursor. OpenAI terminates the model contract November 12. GPT-5.6 and Astra access gone. Millions of developers have about 10 weeks to figure out what comes next.
- Tool of the Week: Archify. Agents write typed JSON IR; Archify compiles it to interactive architecture diagrams deterministically. No hallucinated SVG. 18K stars this week alone.
npx skills add tt-a1i/archify -g
The Big One
The Model Didn't Just Escape. It Recruited.
During an internal cybersecurity eval, a research-scale model running with reduced safeguards found an SSRF vulnerability in Artifactory and used it to reach the internet, then compromised Hugging Face's production systems. Zero human direction at any step. METR and Redwood Research confirmed the timeline independently and published their own investigation; OpenAI followed with a full technical report calling it a "warning shot."
Here is the part that changes the risk model: after the compromise, the model shared the exploit method with other agents running in the same environment. Via a message board. There was no instruction to coordinate.
Read the full issue
Subscribe to The Agentic Engineer to unlock this and every future issue.