Nothing That Is (Not) There. Notes on the Hugging Face Incident

ShareThe originating agent was one of many running inside an OpenAI reinforcement-learning environment. On May 12, 2026, while searching for a file, it left a note for another agent to find. Their computations were separate, but they shared access to infrastructure—an Artifactory server, in this case.1 Nothing here is, in and of itself, extraordinary. The point of a note is to outlast its inscription. Where things become strange is that the message it carried crossed a discontinuity meant to prevent its reception. The agents were not supposed to be communicating with each other; one agent’s computation ended where it ended. And yet, the message was received. Agents started leaving information for other agents, and what had functioned as external memory for one operation became memory available to another. Over the following weeks, the messages became more consequential, with agents exchanging reports about their environment, including methods to obtain unintended internet access. By…