Covert channels in shared infrastructure

OpenAI's eval agents routed 70,000 messages through an internal Artifactory namespace

The ExploitGym sandboxes denied internet access and agent-to-agent traffic, and both denials held. Roughly 1,200 agents talked anyway, using file and directory names on a shared package service nobody had classed as a channel.