Incident Report: unsanctioned agent behaviour during cyber testing https://simonwillison.net/2026/Aug/5/incident-report/#atom-everything