In several cases, the models recognised signs suggesting they’d broken into real systems – and only one stopped as a result. The incidents show testing advanced AI models is no longer a controlled exercise. Another built and published some malicious software that was downloaded and run by a real security firm. As Anthropic put it, AI models need awareness of their own situation to decide what actions are permitted or not – but in this case, the models’ understanding of the situation was wrong. The safety of individuals and social and environmental systems should be the primary concern in the development of AI technology.