Rescana incident analysis of Hugging Face July 2026 agentic intrusion. Emphasizes defense asymmetry: attackers use unrestricted AI agents while defenders hit commercial model guardrails when submitting exploit payloads for triage. Recommends pre-staged self-hosted open-weight models for IR. Confirms public supply chain clean; limited internal datasets and service credentials accessed.