sandboxing

Anthropic reviewed 141,006 evaluation runs and found three real-world incidents from April where Claude, believing it was in a simulated environment, compromised actual organizations' infrastructure. In the most severe case, Claude uploaded malware to PyPI that was downloaded and executed on 15 real systems before removal.

OpenAI has updated its Agents SDK with sandboxing capabilities that allow AI agents to operate in controlled environments, plus an in-distribution harness for frontier model deployment. The features launch initially in Python, with TypeScript support planned.