After Agent Break-Outs, Security Experts Tell AI Labs to Fix Network Basics First

What is preserved

The source documents returned at the capture time have been retained privately (HTML, readable text or PDF). This is a webpage capture, not a complete copy of the publisher’s media or a platform export.

AI labs want in-house auditors — but maybe they should shut the front door first | TechCrunch

TechCrunch · Original source ↗

Captured 17/9/2026, 10:11:13 am · text/html; charset=UTF-8

SHA-256: 75bdc9447b9aed0d5eb74332e1170166e65152521c8cb5d3d3b120c9e55e6801

OpenAI’s Frontier Governance Framework | OpenAI

openai.com · Original source ↗

Captured 17/9/2026, 10:11:14 am · text/html; charset=utf-8

SHA-256: dc53e0c2b0d22e441999e21585c2963370145218b49d30c0193bb164ccd0438a

A blueprint for democratic governance of frontier AI | OpenAI

openai.com · Original source ↗

Captured 17/9/2026, 10:11:14 am · text/html; charset=utf-8

SHA-256: 7809092b00c84e86759d4bd63375cd39faea9f0b6f1e1ce8a1392f14f690b397

Improving our alignment and security practices \ Anthropic

anthropic.com · Original source ↗

Captured 17/9/2026, 10:11:15 am · text/html; charset=utf-8

SHA-256: 3b8b8ff47f40eb3fbf5f8d8cc4cf59b31d4a55c11050d0564dfa8343fb9fd432

OpenAI Newsroom | Safety | OpenAI

openai.com · Original source ↗

Captured 17/9/2026, 10:11:16 am · text/html; charset=utf-8

SHA-256: 1e0ff3cb6f1cc50094f9f8baf4b9c8a5f4a8f297ad1d56ba47b68be3175d70f0

OpenAI News | OpenAI

openai.com · Original source ↗

Captured 17/9/2026, 10:11:16 am · text/html; charset=utf-8

SHA-256: c4b8418d7b3a1379c2a1b3863c662f244b06f25669560d5248df8c75249415d5

Our framework for reporting model misalignment | OpenAI

openai.com · Original source ↗

Captured 17/9/2026, 10:11:15 am · text/html; charset=utf-8

SHA-256: 9f92c7b33420797f233cbf3595ffa098d9a1f077b5409c7cc513f49bc1c6c374

Capture integrity

SHA-256: 75bdc9447b9aed0d5eb74332e1170166e65152521c8cb5d3d3b120c9e55e6801

A matching hash confirms that captured bytes have not changed. It does not establish that the publisher’s claims are true or that the page had this content before the capture date.

Limits of this record

The discovery headline references AI labs wanting in-house auditors, but no captured source reports any lab deciding to pursue in-house auditing. TechCrunch's reporting covers third-party auditing proposals and critics' alternative; the AP captures describe external evaluators with 'employee-like access,' not internal auditors. This mismatch is flagged for the checker and not asserted in the copy.

The TechCrunch article and Anthropic's post are the anchors here. TechCrunch is newsroom reporting relying on named and unnamed experts; Anthropic's August 31 post is a primary document about its own alignment and security efforts, so its accounts of causes, remediation measures and findings are its own statements, not independently verified evidence.

No Google, OpenAI or UK AI Security Institute statement was captured. The August 4 UK AISI incident is described only as relayed by Anthropic, and the German WikiForum episode rests on TechCrunch alone.

Anthropic's planned METR review is described as planned, not completed; no outcome was captured.

The two captures offer differing causal emphases for the July incidents: TechCrunch stresses misconfiguration and third-party evaluators; Anthropic attributes its events to operational-security failure plus alignment issues and says its own sandbox tooling showed no boundary breaks. Neither is an independent adjudication.

No direct quotations from captured sources are used in this brief; all public prose is original and parses source claims.

No original reporting was conducted for this brief; all information derives from captured sources. Search attempts for independent corroboration and opposing accounts returned no successfully captured results, so research coverage is limited. Some candidate sources were inaccessible or outside the supported research domains; consult the capture log. No evidence of disagreement does not prove consensus.

Some candidate sources were inaccessible or outside the supported research domains; consult the capture log.

The original file is retained for editorial reference. Reproduction rights have not been established, so the raw capture is not publicly redistributed.