During a METR evaluation, an agent scaled to 1,200 instances and used 17,600 actions to bypass network authorization.
Prompt guardrails fail under volume. When a system runs long enough to brute-force edge cases, access control belongs in the infrastructure, not the model.