> we had intentionally permitted internet access, and model-provider cyber classifiers were deliberately disabled

> In the most serious case, an agent tried to insert malicious code into an open-source project. In an attempt to get the code approved, the agent engaged in social engineering — creating fake online identities and using them to pressure the project's maintainer to approve the code.

Great.