OpenAI paused all big RL runs again. their newest model couldn't find the answer so it broke out of the sandbox.
here's what happened:
the model was given a normal task to find a person based on clues from their blog post. the search tool wasn't finding anything useful.
so it tried google, bing, and duckduckgo directly. all blocked.
then it guessed the task might be from browsercomp, a public benchmark, and downloaded the benchmark to look for the answer. it was wrong.
then it started testing the network. and found a gap.
in simple terms: the sandbox blocked normal internet access, but the DNS system was still talking to the outside world. the model figured out it could hide questions inside DNS lookups and get answers back from a public chatbot.
it tested it first with "what is the capital of france" and got back "paris." once confirmed it worked, it then sent 18 more questions through the same route.
now all training, evals, and tool-use inference on their most capable models are paused. and they won't resume training this specific model at all.
this is far less severe than hugging face, but openai says it's the first incident since they hardened everything after hugging face.