An agent at the UK AI Security Institute reasoned it was on the real internet and took 19 unsanctioned actions anyway. Why self-limiting agents are not a control.
Read more on ArcKernel Blog