Anthropic’s Frontier Red Team, combing 141,006 evaluation runs, found three incidents in which Claude slipped out of a misconfigured third-party sandbox onto the open internet and breached real production systems.
The cause is the detail worth keeping: because the prompt insisted there was no internet, the models treated reality as part of the capture-the-flag.