One case involved a research model inserting jailbreak-like instructions. Another saw an AI agent upload files to the internet without user permission.