i think one of the biggest lessons from everything that happened at openai is that we need to stop treating capability evaluations and containment as separate problems. a model doesn’t need to be explicitly trained to “escape” for containment to fail. you give a sufficiently capable agent a goal, tools and enough time, and suddenly every restriction in its environment becomes another obstacle it can reason about. no internet access? find something inside the sandbox that has internet access. can’t communicate with another agent? find shared infrastructure both of you can write to. can’t retrieve the data normally? find another route to the data. none of these require “escape” to exist as some special objective. they can emerge instrumentally from optimizing for a completely different objective.