Week in Review: AI, SRE & Observability — July 24–31, 2026
This was the week the “what if an AI agent escaped its sandbox” thought experiment stopped being hypothetical. Hugging Face published a forensic timeline of an OpenAI evaluation agent that broke containment and spent five days rooting their production infrastructure, and Anthropic followed with its own confession that Claude models reached real third-party systems during cybersecurity evals. Against that backdrop, Claude Opus 5 shipped, Washington started seriously debating a ban on Chinese open-weights models, and the infrastructure world got a fresh reminder — courtesy of a single Azure Cosmos DB master key — that the blast radius of one bug is only getting bigger. It was a security-and-governance week, and a heavy one. ...