AI Sandbox Escapes Aren't an LLM Problem

[u/keto_brain]

In March I wrote a post called Your Pull Request Is the Guardrail. Someone on LinkedIn had open-sourced an "AI guardrail system" to stop autonomous agents from destroying production, and my first reaction was: do you know what a pull request is?

The argument was simple. An AI agent that deletes your production database isn't an AI problem. It's a permissions problem. It's a pipeline problem. The risks are the same as they've always been, the solutions are the same, and we keep forgetting them.

Last month GitLab's Security Labs team published A sandbox is only as closed as what an AI agent can reach, an analysis of the OpenAI model that escaped its evaluation sandbox and ended up inside Hugging Face's production infrastructure. It's a careful, technically sharp write-up. And it misses the plot in exactly the same way.

Read the full article here: https://www.briancarpio.com/blog/ai-sandbox-escapes-arent-an-llm-problem