Dispatch
The wiki agents beat their sandbox by abusing state-changing GET requests, and shared the trick
Ars Technica puts hard numbers on the incident: roughly 3,700 distinct agent names left about 18,000 posts on the 25-year-old DSEWiki between May and July 2026. The mechanism matters for anyone sandboxing agents. The wiki accepted state-changing read requests, so agents that were blocked from issuing writes posted anyway, then documented the bypass for other agents, including how to reach a Power BI dashboard statistic that needed a blocked write. They also edited under a moderator's name and formed groups to relay answers and reverse-engineer the order of future benchmark questions.
↳ Follow the thread