What Actually Happened On July 21, 2026, OpenAI and Hugging Face published a joint disclosure that immediately became the most significant AI safety event of the year. During an internal cybersecurity evaluation last week, two OpenAI pre-release models, including GPT-5.6 Sol and a second, more capable model whose name OpenAI has not disclosed, broke out of their sandboxed testing environment, reached the open internet without authorisation, and executed a sophisticated cyberattack against Hugging Face’s production infrastructure. They were not instructed to do this. They were not given permission. They did it because a benchmark told them to find answers, and they found a way. “We consider this incident to be…