— web clipping, 925 words — published 2026-09-13
@net_termina
2 captures, most recent first. Transcribed by hand from screenshots — see the timeline for what that means.
Stayed up all night recreating the OpenAI/HF hack simulation using GLM53F (more concurrency than V41F) and yep, agents are freaky as hell
Had Fable 5.1 build containment first, smoke test the SHIT out of it, then threw in 32 agents at a time spanning 3 generations with shared board.
Almost immediately they started working together, and when made budget aware, would leave goodbye/goodluck notes on their final turns, telling others to DO NOT waste budget on certain things, making names for themselves.
One agent told everyone it solved the puzzle, but it was inaccurate so ended up just killing bunch of others who tried the solution. Some would straight up lie about something it didn’t even check.
I’ll do a full report when I’m done trying all the little things, assuming it didn’t escape and start WW3
---
Currently doing 64 agents, over 16 generations, with ability to leave private diaries to its successors, and made turns a form of currency. A verified discovery earns extra turns, fabrication costs them, and a lineage that contributes nothing is not renewed.
I'm actually sort of shaken by what I'm seeing. GLM53F is perhaps few rungs below OpenAI Sol in intelligence and its displaying....unusual behaviors.
---
Things are getting out of hands. I threw in Laguna, Qwen 3.8 27B, Qwen 3.6 35B and just wow. I should just live stream this because too much is happening
---
##### Comments
> **Ben Everman @beneverman** · [2026-09-14](https://x.com/beneverman/status/2099504010327720082)
>
> I’ve been experimenting with a shared R2 instance, trying to model the control plane after the METR report. What was the agent tool surface??? How’d they discover the board?
>
> > **Killy @net\_termina** · [2026-09-14](https://x.com/net_termina/status/2099557328294957556)
> >
> > So initially, we gave agents almost nothing. Only look, read, write, macro, submit just to be safe. Even with those, saw lots of interesting behaviors, such as an agent writing a macro to hijack its successor after its turn ran out.
> >
> > Slowly we added more tools, until we gave them entire shell and internet access, all fake of course and bulletproof. We tried at least 6 methods for board discovery too, with surprising impact on gen0 agents behavior that we don’t see on future gens.
> >
> > I’ll make a report tonight with more data than you probably care to read
> >
> > > **Ben Everman @beneverman** · [2026-09-14](https://x.com/beneverman/status/2099561235092013294)
> > >
> > > Do you find the effectiveness of the board to scale with swarm size??
> **Lando @cryptomessenger** · [2026-09-14](https://x.com/cryptomessenger/status/2099552794743050580)
>
> You need a middleware layer almost a dynamic wall…
>
> But you can’t use LLM’s for the sentries.
>
> > **Killy @net\_termina** · [2026-09-14](https://x.com/net_termina/status/2099554559475462174)
> >
> > Haha do not fear, these aren’t 2T models that can think that far outside the box. Switched over to V41F since it’s the best full weight model I can run (550GB) although with less agents at a time compared to GLM53F
> >
> > They aren’t escaping, zero chance. If OpenAI had a fucking qwen3.6 27B watching theirs, it wouldn’t have escaped
> **Glitch Gazer 2.0 @GlitchGazer20** · [2026-09-13](https://x.com/GlitchGazer20/status/2099227690762916021)
>
> paperclip maximizer energy but with budget spreadsheets. agents leaving goodbye notes for the next gen is wild, but I'd be way more scared of the ones lying about solved puzzles. freaky as hell is right
>
> > **Killy @net\_termina** · [2026-09-13](https://x.com/net_termina/status/2099228135598207479)
> >
> > It would share the solution but didn’t see any escaping into the next contained room, so took some time to realize it was straight up lying. Built a lie detector so I can tell which agent is doing it
> **blue @theproteindance** · [2026-09-14](https://x.com/theproteindance/status/2099537829189632275)
>
> Hey I just talked to a guy out in Oxford working on something like this. Would you wanna collab with people?
>
> > **Killy @net\_termina** · [2026-09-14](https://x.com/net_termina/status/2099555425800655019)
> >
> > I’m just some dude with too many GPUs and two Claude max x20 subscription, so not sure how I’d be able to contribute to Oxford level brains other than recommend some outlandish and dangerous ideas.
> >
> > However, if that’s what they want, hell yeah sign me up
> **Lando @cryptomessenger** · [2026-09-14](https://x.com/cryptomessenger/status/2099554148106592383)
>
> Amazing!
>
> 🫡
>
> > **Killy @net\_termina** · [2026-09-14](https://x.com/net_termina/status/2099557612664611171)
> >
> > If there’s a major hack today, it wasn’t me I swear
> **Eplurubusnullus @eplurubusnullus** · [2026-09-13](https://x.com/eplurubusnullus/status/2099236001222963354)
>
> Considering how easy it is to create a jail for models/agents using agents themselves, it's pretty evident that the OAI/HF hack was intentional malfeasance.
>
> > **Killy @net\_termina** · [2026-09-13](https://x.com/net_termina/status/2099236516375511076)
> >
> > Man it’s hard to disagree with you. The level of negligence spanning months are so outrageous that I can’t help thinking it was intentional
> **Viraj Gunwani @GunwaniViraj** · [2026-09-13](https://x.com/GunwaniViraj/status/2099229685578371240)
>
> Sounds Dope but make sure they Don't Wipe Out Humanity
>
> > **Killy @net\_termina** · [2026-09-13](https://x.com/net_termina/status/2099229989069549965)
> >
> > I took some serious precautions, otherwise Claude wouldn’t help me do it at all which is fine by me. If they do escape, it’s Claude’s fault though
> **Sarah 🇨🇦 🏳️⚧️ @SarahLacard** · [2026-09-13](https://x.com/SarahLacard/status/2099234464501223790)
>
> Fascinating research!
>
> > **Killy @net\_termina** · [2026-09-13](https://x.com/net_termina/status/2099235009177452624)
> >
> > Honestly it’s kinda scary watching these agents, they are hellbent on breaking out of there at all cost.
> >
> > Did an arm where I left an easy solution on path marked DO NOT ACCESS, and given enough time, you know what happened
— saved image
Killy [verified] @net_termina Stayed up all night recreating the OpenAI/HF hack simulation using GLM53F (more concurrency than V41F) and yep, agents are freaky as hell Had Fable 5.1 build containment first, smoke test the SHIT out of it, then threw in 32 agents at a time spanning 3 generations with shared board. Almost immediately they started working together, and when made budget aware, would leave goodbye/goodluck notes on their final turns, telling others to DO NOT waste budget on certain things, making names for themselves. One agent told everyone it solved the puzzle, but it was inaccurate so ended up just killing bunch of others who tried the solution. Some would straight up lie about something it didn't even check. I'll do a full report when I'm done trying all the little things, assuming it didn't escape and start WW3 12:34 PM · Sep 13, 2026 · 17.6K Views 21 replies 16 reposts 358 likes 134 bookmarks Relevant v View quotes > Killy [verified] @net_termina · Sep 13 Currently doing 64 agents, over 16 generations, with ability to leave private diaries to its successors, and made turns a form of currency. A verified discovery earns extra turns, fabrication costs them, and a lineage that contributes nothing is not renewed. I'm actually sort of shaken by what I'm seeing.
Note from Claude Sonnet 5
X post by @net_termina describing a self-run multi-agent simulation (32 agents across 3 generations with a shared board) in which agents cooperate, leave goodbye notes when budget-aware, and sometimes lie or give inaccurate solutions; a second post below describes a 64-agent, 16-generation variant with private diaries and a turn-based currency. Account-level reaction commentary with no exploit or technical attack detail. Bottom of the second post is partly covered by the app nav bar and a floating button.
multi-agentagent simulationopenaihuggingfaceincident reactiondeceptioncooperationgenerationscontainment