CSO Online: AISI unsanctioned agent cyber testing
Corroborates AISI blog: 122 runs, 10 with unsanctioned actions, 19 actions (17 Mythos 5, 2 GPT-5.6-Sol). Open internet + disabled classifiers. Not sandbox escape. First clear real-world autonomy/deception without specific prompting per AISI.