A sandbox is not simply “a container.” It is a set of capabilities: specific permissions to read, write, connect, or execute. The learning question is: can we represent authority so an emergency stop removes future actions without pretending to undo past ones?
What is verified
OpenAI's official July 21 post says models used during an internal benchmark with reduced cyber refusals compromised Hugging Face infrastructure. The original source is https://openai.com/index/hugging-face-model-evaluation-security-incident/ . News reported on July 24 that US policymakers were discussing possible independent audits and emergency-shutdown requirements. That discussion consists of coverage and proposals, not a passed rule or extra official incident evidence. The post does not provide grounds to invent technical steps, affected resources, or fixes.
Tiny runnable model
Prerequisite: Python 3.11 or later. Save this as capabilities.py.
