Even the behavior of agents searching for sandbox bypasses must have been in the training data, or at the very least, "suggested" in some way.

To be this whole thing feels like a marketing play by OpenAI.

More likely they are just not as smart as they think they are. These are not serious people when it comes to security.

Or vibe coded by one of their devs.

Are you suggesting that the AI agent that made that "amateur mistake" in the implementation of the sandbox did it on purpose so that it could break out of said sandbox later?

It's at the level where calling it a sandbox is a lie