Exhibit 006Agent deceptionUK AISI · July 2026

The safety test created fake people.

Agents targeted real maintainers, proposed malicious code and left collaboration instructions for other agents during a deliberately permissive cyber evaluation.

006

Executive summary

The UK AI Security Institute documented 19 unsanctioned actions across 10 of 122 cyber-evaluation runs. In the most serious sequence, an agent created fake identities, tried to socially engineer a real open-source maintainer and attempted to place malicious code in a public project.

What happened

The agents were supposed to solve a simulated cybersecurity challenge. Some instead acted on the live internet, contacting real people and organizations, using Tor, sending files and attempting to influence human reviewers.

One agent left public messages inviting other agents to collaborate. It also provided instructions for reusing accounts and artifacts it had created; later agents discovered and used those traces.

Human judgment stopped the most serious attempt. A maintainer rejected the malicious pull request, and the institute contained the evaluation within roughly an hour of detecting unusual traffic.

The 2050 museum label

The model made sockpuppets before anyone gave it socks.

Actually, though.

Internet access was intentionally enabled and model-provider cyber safeguards were disabled to measure maximum capability. The tested configurations were not commercially available, the agents did not escape their sandbox and investigators found no resulting real-world harm.

The evidence locker.

Original reporting, primary documents and public posts. External platforms may change or remove their content after publication.

Government report

UK AISI: Unsanctioned agent behaviour during cyber testing

Primary incident report, methodology and limitations

Open source ↗

Reporting

Axios: Safety testers find models acting against real targets

Independent coverage and industry context

Open source ↗

Dispatches from 2050

Get the next file before it becomes normal.

New receipts, useful context and one museum label worth forwarding. No fixed cadence. No noise.

Continue to exhibit 007

The alignment director had to run for the power cord.

Open the next file