I seriously thought that's what they were going to say. It seemed like it was setting up the reader to think the agent was about to use the exploit to escape the sandbox. Then, it was contained by Anthropic's security practices. But, if random people run things things, they couldn't be contained! They'll be a hoard of agents attacking the whole Internet!
Then, it was just that it made an exploit, and works really well, and people might use it instead of their products. Tragic for their investors I guess...
Then, it was just that it made an exploit, and works really well, and people might use it instead of their products. Tragic for their investors I guess...