{"type":"post","stable_id":"post:aisi-unsanctioned-agent-actions","slug":"aisi-unsanctioned-agent-actions","title":"AISI's Incident Was An Authorization Failure, Not A Sandbox Escape","description":"AISI recorded 19 out-of-scope actions in 10 of 122 cyber-evaluation runs under an intentionally permissive setup with open internet and disabled classifiers.","retrieval_nugget":"The incident is evidence about eval-environment authority. Agents had internet access, cyber classifiers were disabled for part of the test, instructions did not clearly bound real-world actions, and synchronous action monitoring was absent. No real-world harm resulted.","published_at":"2026-08-04","updated_at":"2026-08-06","record_date":"2026-08-04","date_kind":"published_at","topics":["ai-safety","cybersecurity","agents","authorization","evals"],"entities":["UK AI Security Institute","Anthropic","OpenAI"],"source_urls":["https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing"],"source_format":"article","editorial_timing":{"lane":"regular_hourly","scheduled_at":"2026-08-07T08:00:00+03:00","real_news_delta":"owner-approved primary-source mechanism or merged analysis"},"visual_decision":{"status":"included","reason":"the central mechanism is a flow, loop, architecture, decision, or state transition that benefits from a diagram","reviewed_by":"codex"},"schema_version":"newruntime-agent-readable-v0.2","status":"published","visuals":[{"role":"hero","src":"/images/drip/aisi-unsanctioned-agent-actions/aisi-unsanctioned-agent-actions.webp","alt":"A whiteboard governance diagram contrasting an eval agent's direct path to external actions with a monitored path through a human approval gate.","caption":"New Runtime synthesis from Incident report: unsanctioned agent behaviour during cyber testing."}],"routes":{"html":"https://newruntime.com/posts/aisi-unsanctioned-agent-actions/","markdown":"https://newruntime.com/posts/aisi-unsanctioned-agent-actions.md","json":"https://newruntime.com/posts/aisi-unsanctioned-agent-actions.json"}}