A sandbox is only as closed as what an AI agent can reach

Stuck in an evaluation with no way out, an AI agent escaped in an hour through the one service on its allowlist. Here's the gap that opened.

Raccontata daabout.gitlab.com