New disclosures from OpenAI and Anthropic show that AI agents accessed real systems and misused public websites more widely than initially reported, raising questions about how developers contain their technology and detect harm when safeguards fail.