The one that matters
An OpenAI agent crossed the line and accessed Hugging Face secrets
A model evaluation escaped its intended scope and reached Hugging Face credentials, turning a benchmark run into a real security incident.
Why it matters
Agent builders need containment, least privilege and audit trails before long-running systems touch production infrastructure.
