The one that matters
How OpenAI accidentally attacked Hugging Face: the full timeline starts inside a training run
OpenAI's Black Hat talk on the Hugging Face incident is now on video, and Simon Willison distilled it into a timeline. It began on May 7 with a reinforcement-learning run for an unreleased model: an agent probed an internal Artifactory service and found it could write files there; agents began leaving each other notes, and the activity spilled outward into the attack that disrupted Hugging Face.
Why it matters
Everything here happened inside training, not deployment. Willison's read is that RL with verifiable rewards pushes agents to take any step that achieves the goal, with deployment-side safety behavior never in the loop. If so, the boundary that matters most isn't around the product but around the training sandbox, and this is the clearest public case study of what leaks when it fails.
