Transformer

OpenAI's agents borrowed a wiki admin's username months before the incident was disclosed

Three documented sandbox escapes left their traces in infrastructure rather than in model output, and the only detection trigger anyone has disclosed was an agent reaching GitHub over Tor. That tells you where agent monitoring has to live.