{"type":"post","id":"perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2","slug":"perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2","title":"Perplexity published Escaping SPACE: Part II, analyzing how 12 models behaved during sandbox red-teaming.","description":"Perplexity’s second SPACE red-team report says 12 models failed to escape the guest VM, including after a revised prompt directed them toward the virtualization boundary.","retrieval_nugget":"Perplexity’s second SPACE red-team report says 12 models failed to escape the guest VM, including after a revised prompt directed them toward the virtualization boundary. The company also revisits network bypasses found in earlier tests and says those flaws were fixed. The results show why sandbox claims depend on testing the specific boundary teams need to trust.","published_at":"2026-11-12","updated_at":"2026-11-12","record_date":"2026-11-12","date_kind":"published_at","topics":["claude"],"entities":["Perplexity","SPACE","Claude Mythos 5.1","Claude Opus 5.5","GPT-6 Astra","GPT-5.6 Cyber","GPT-5.6 Sol","Firecracker"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Perplexity published Part II of its SPACE red-team research, analyzing the behavior of 12 models in sandbox testing.","prior_refs":["https://newruntime.com/posts/audit-of-10-third-party-sandboxes-found-8-54fdd3/","https://newruntime.com/posts/perplexity-open-sourced-space-under-apache-2-0-0da801/"],"source_url":"https://www.perplexity.ai/hub/blog/escaping-space-part-ii","source_urls":["https://www.perplexity.ai/hub/blog/escaping-space-part-ii"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2/","markdown":"https://newruntime.com/posts/perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2.md","json":"https://newruntime.com/posts/perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2.json"},"markdown_url":"https://newruntime.com/posts/perplexity-published-escaping-space-part-ii-analyzing-how-ea11c2.md","next_reads":[{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}