> The target was a QEMU/KVM VM on my Linux dev machine (Debian Linux 12, AMD Zen3). It escaped the VM three different times
QEMU isn't secure, and is not intended to be.
hence, "VMs won't contain cyber-capable agents"
hence, "VMs won't contain cyber-capable agents"