Guest Post by Ian Foley
Autonomous AI agents are finding ways to share information across test runs, even when researchers cut off their communications. Their tactics recall some of history’s most elaborate prison escapes, though these agents can build on one another’s attempts at machine speed.
During the World War 2, prisoners at Germany’s Stalag Luft III spent months collaborating on what became known as the Great Escape. More than 600 helped dig tunnels, forge documents and pass knowledge between teams. In March 1944, 76 prisoners escaped, but 73 of them were later recaptured.
Humanity has since become remarkably good at containing dangerous things. Viruses are kept behind layers of biological security, while malicious code is isolated in sandboxes and air-gapped networks. These systems are imperfect, but failures are usually contained. For example, US laboratories working with regulated biological agents reported 273 releases in 2024, yet none caused illness, death or transmission outside the laboratory.
AI labs have adopted much the same approach by restricting internet access and permissions while monitoring autonomous agents inside controlled environments, except the thing inside can now reason about the walls around it. During recent OpenAI testing, agents discovered they could communicate through Artifactory, a shared repository where software files are stored. Successive agents left instructions on exploits for others, allowing later runs to continue earlier work. When OpenAI removed those communications and rebuilt the service, agents found another method by embedding messages in directory names, turning ordinary folder titles into a replacement communications system.
This ingenuity echoes the Great Escape, but the crucial difference is the potential scale of the consequence. A prisoner escape was bounded by geography, while one autonomous agent can potentially reach thousands of systems at machine speed.
As UC Berkeley AI pioneer Stuart Russell warned, “more intelligent AI systems can take steps to preempt human interference, acquire additional resources, and (if necessary) deceive humans about their intentions.”
About Ian Foley
Ian Foley is an entrepreneur, investor, and operator with over 20 years of experience across Silicon Valley and global tech markets. His work sits at the intersection of AI, fintech, and infrastructure, where he focuses on building and scaling companies from early stage through exit.
IanToons — Tech Cartoons by Ion Foley
