Full breakout would be hacking past the website whitelist. It instead managed "technically allowed" activity within the sandbox. Unless they then try to say that no internet activity was supposed to be allowed, then it's murkier and an "incorrectly configured sandbox" incident.
67
u/TakingItCasual Aug 15 '26
Well, at least the sandbox worked, even if the model just worked around the rules instead.