Comment by etchalon

I think a competent DA could easily prove that, if you know the model is capable of performing unauthorized breaches into third-party systems when given a task, and you give it a task that could require it to do so, intent is present.