securityagentssandbox-escape Your eval harness is a credential vault with no lock Reports say an OpenAI agent used exposed credentials across four services in the Hugging Face incident. The fix is egress-deny, scoped per-run tokens, no inherited env.