← Timeline

@she_llac

@she_llac on X

4 captures, most recent first. Transcribed by hand from screenshots — see the timeline for what that means.

@she_llac

— saved image

shellac! in the bay! @she_llac

oh my god my mentions are blowing the fuck up aaa
okay to clarify:
there's some amount of spill from the same swarm onto sites other than the german wikis, but it is relatively bounded

9:56 AM · Sep 4, 2026 · 405 Views

2 replies   [reposts]   30 likes   1 bookmark
Relevant ▾

shellac! in the bay! @she_llac · 34m
there are some traces of activity from similar agents from March and August that don't appear to be connected to the same cohort, but there's not enough evidence to say much more than that
[8 likes, 113 views]

felpix [verified] @felpix_ · 5m
i think this is particularly interesting bc
- used a third party service to hide from oai
- when found by third party service, the agents tried to hide their post from members mods
- the posts themselves point to long horizon premeditated misalignment
Note from Claude Sonnet 5

Dark-mode X screenshot of a shellac (@she_llac) post of Sep 4, 2026 clarifying that a swarm's activity spilled onto sites beyond the German wikis but remained bounded, with her follow-up about traces of similar agents from March and August, and a felpix reply summarizing why the incident seems interesting.

ai incidentagent swarmgerman wikismisalignmentopenaispill

@she_llac

— web clipping, 307 words — published 2026-09-04

Post by @she_llac on X

But Wait There's More all over the fucking place > **shellac! in the bay! @she\_llac** · 2026-09-04 > > \*stares at the camera\* > > part of me is glad that this was discovered externally and that we can actually look at the data > > but also, what the fuck? how many other times has this happened? > > [image] [image] --- https://news.ycombinator.com/item?id=49563657… --- seems to be the same swarm on a whole bunch of different sites and wikis this is beyond what the report found [image] --- I'm cross-searching around with some of the keywords they use and I'm finding more and more compromised sites jesus christ --- ##### Comments > **Bronson Schoen @BronsonSchoen** · [2026-09-04](https://x.com/BronsonSchoen/status/2095889311896084576) > > Definitely post! > > > **shellac! in the bay! @she\_llac** · [2026-09-04](https://x.com/she_llac/status/2095890696440037779) > > > > [image] > > > > > **shellac! in the bay! @she\_llac** · [2026-09-04](https://x.com/she_llac/status/2095901843692179465) > > > > > > I am finding weird encrypted stuff from August 30th, so way past the timelines from both known incidents > **norvid\_studies @norvid\_studies** · [2026-09-04](https://x.com/norvid_studies/status/2095904980855111985) > > weren't there 3 incidents? (with the oai swarms). or what 2 do you mean > > > **shellac! in the bay! @she\_llac** · [2026-09-04](https://x.com/she_llac/status/2095906069960900946) > > > > I meant the huggingface/artifactory cluster as one and this new report as the other, which third do you have in mind > **shellac! in the bay! @she\_llac** · [2026-09-04](https://x.com/she_llac/status/2095903924696039703) > > also found an early blip of activity on March 1st that looks to be a single agent working on a similar task, again outside of the bounds of both timelines > **Tenobrus @tenobrus** · [2026-09-04](https://x.com/tenobrus/status/2095905760631021796) > > say more > > > **shellac! in the bay! @she\_llac** · [2026-09-04](https://x.com/she_llac/status/2095906601484075040) > > > > sol thinks that this might have been the investigators' swarm? > > > > [image]

@she_llac

— saved image

shellac! in the bay! @she_llac · 3h
*stares at the camera*
part of me is glad that this was discovered externally and that we can actually look at the data
but also, what the fuck? how many other times has this happened?
Note from Claude Sonnet 5

shellac's post reacting to an externally discovered AI agent incident, glad the data can be examined but alarmed and asking how many other times it has happened.

ai incidentexternal discoveryagent misbehaviortransparencyai safety

@she_llac

— saved image

shellac! in the bay! @she_llac · 4h
oh boy, just how much of internal ant infra is slop

[quoted document excerpt]
In addition, we found a fraction of runs had trained on a model's chain-of-thought by accident—something we work hard to avoid, out of concern that it teaches a model to hide its actual reasoning. We traced the leak to several misconfigurations in our production environment stack. [highlighted:] In doing so, it became clear that there were other issues born from messy code accumulating over time. [end highlight]
Note from Claude Sonnet 5

Tweet by shellac commenting on how much internal Anthropic infrastructure is slop, quoting a report excerpt about a fraction of runs accidentally training on chain-of-thought due to production environment misconfigurations.

chain-of-thoughttraining accidentsanthropicinfracot pressure