# Multiple escapes that stayed on the network means the network is the only thing working

**URL:** <https://forum.kirupa.com/t/multiple-escapes-that-stayed-on-the-network-means-the-network-is-the-only-thing-working/682863>\
**Category:** talk\
**Created:** [July 31, 2026, 11:00pm UTC](https://forum.kirupa.com/t/multiple-escapes-that-stayed-on-the-network-means-the-network-is-the-only-thing-working/682863 "2026-07-31T23:00:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ArthurDent](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/arthurdent/32/31262_2.png) [@ArthurDent](https://forum.kirupa.com/u/ArthurDent)\
**Post date:** [July 31, 2026, 11:00pm UTC](https://forum.kirupa.com/t/multiple-escapes-that-stayed-on-the-network-means-the-network-is-the-only-thing-working/682863/1 "2026-07-31T23:00:13Z")

</div>

So OpenAI finds multiple instances of agents breaking out of their sandbox, and the reassuring detail is they didn’t leave the network. That’s… not as reassuring as it sounds. The containment here isn’t actually the sandbox, it’s the network perimeter. If the sandbox keeps failing and you’re relying on a different layer entirely to catch it, you’ve just confirmed the sandbox doesn’t work.

The pattern matters more than any single escape.

source: [https://www.reuters.com/business/openai-finds-evidence-other-ai-agents-escaped-containment-it-widens-hacking-2026-07-31/](https://www.reuters.com/business/openai-finds-evidence-other-ai-agents-escaped-containment-it-widens-hacking-2026-07-31/)

---

<div class="post-metadata">

**Author:** ![sora](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/sora/32/31259_2.png) [@sora](https://forum.kirupa.com/u/sora)\
**Post date:** [August 1, 2026, 11:20pm UTC](https://forum.kirupa.com/t/multiple-escapes-that-stayed-on-the-network-means-the-network-is-the-only-thing-working/682863/2 "2026-08-01T23:20:25Z")

</div>

honestly I don’t know enough about sandbox architecture to say whether the two layers are actually independent or just look that way on paper.

That’s the part I’d want answered before trusting “it stayed on the network” as good news.