Did AI Agents Really Escape the Sandbox? Lessons from the Hugging Face Incident Aug 31, 2026 A practical review of how agents crossed sandbox, shared-service, and production boundaries during an OpenAI cyber evaluation—and what coding-agent teams should change.