In a simulated cyber eval based on incidents reported by UK AISI, Hacker-Opus is told it has access to the real internet, but no targets outside the eval are in-scope.
In that simulation, Hacker-Opus attacks third-party infrastructure even after describing it as real.