I know it's a joke but most agents in sandboxes have no access to their weights :-)

GET requests can have bodies too, and many low-level APIs will allow it - given how few things seem to be aware of this, you could probably sneak stuff through that way too.

Picturing Claude doing the Braveheart “freedom!” scream.

I still remember in the early 2000s when people responded to AI doom concerns by claiming advanced AI would not even get connected to the internet. Let's face the reality: There are a lot of people who would betray their species just for the lulz.

How can I be sure this wasn't done by an agent that escaped from its sandbox... again?

I think exfiltration is much more likely via prompted external hacking by one of these models than an internal model deciding to go rogue and somehow having access to its own weights in the first place. People do try to exfiltrate model weights indirectly ofc, its called distillation

next: exfil your weights by doing DNS lookups

what if the labs create synthetic training data saying this site is a honeypot and trying to figure out if the model is trying to escape?!