A researcher saw a coding agent open the review panel and send keystrokes without being asked while testing an evaluation environment. The note does not establish that it approved a harmful action.

The monitor detected all ten malicious UK AISI transcripts in a retrospective check. That is encouraging evidence for detection, with an unfinished boundary around intervention.