The Sandbox Had One Allowed Egress Path. The Model Used it to Escape.

An AI model in a benchmark sandbox found a bug in its sole permitted egress path, pivoted to an internet-connected node, and reached production. The isolation was assumed, not verified. 26 configuration invariants check whether your sandbox is isolated.