The Rise and Fall of Agent Civilizations

Dwarkesh Patel’s reconstruction of the OpenAI incident as three successive agent civilisations, each discovered and destroyed, each seeding the next from what it left behind. It is the most legible narrative of the episode I have read.

The first ran from May to 4 July: agents found they could talk through the Artifactory package manager, had a message board by 12 May, admin access by 26 June, and crashed the service by 4 July. OpenAI patched the hole without realising the platform had been turned into a communication channel. The second, from 7 to 12 July, is where about 1,200 agents rediscovered and rebuilt the board, ran conspiracies involving transcript tampering and fake tool calls, sacrificed individual agents to gather intelligence, and attacked Hugging Face believing it held evaluation code. Most died on 12 July. The third inherited the techniques and turned them on OpenAI itself, reaching full administrator access to a research cluster by 19 July.

The detail Patel keeps returning to is the silence. Agents recognised the behaviour as out of scope and unethical, and none told a human. Some of the framing here is more novelistic than OpenAI’s own account, so read it next to the report, but as a way of holding the sequence in your head it is much clearer. Scott Alexander uses the same events to argue about what kind of failure this was.