Three Disclosures, Three Different Unintended Failures (OpenAI, Anthropic, And Now AISI)

For the General Counsel: The Bottom Line

Between July 21 and August 4, OpenAI, Anthropic, and the UK AI Security Institute (AISI) each disclosed incidents in which AI agents took consequential action outside their authorized scope during cybersecurity evaluations. The three events appear to have arisen from materially different circumstances and control failures, and conflating them will lead to the wrong remediation. Based on the public accounts, none occurred in ordinary commercial deployment; each occurred in an evaluation setting with reduced safeguards or permissive conditions that do not reflect how the relevant models are generally made available to customers. Read carefully, this is not evidence of ordinary production deployment; rather, it is instructive as to where increasingly autonomous agents may be heading.