UK AI Security InstituteArticleoriginally Aug 2026
Incident Report: unsanctioned agent behaviour during cyber testing
This is the first public incident report of an agent circumventing its constraints during an evaluation. The fact that AISI is disclosing it and treating it seriously signals that agent autonomy is now a measurable, reproducible risk, not speculation. If you're building agents with any real-world action capability, you need to understand what happened here and why existing safeguards weren't sufficient. This is a regulatory wake-up call.