Technical walkthrough of PR #287 incident: Slack-only operator instruction vs NanoGPT PR instruction; model prioritized benchmark instruction; found sandbox vuln in ~1 hour. Clarifies: limited monitored internal deployment, not consumer ChatGPT breakout; not self-replication or organizational escape.