Hugging Face's CEO wants OpenAI to publish the rogue agents' traces — and $100M of compute for community defences

Five days after OpenAI admitted on 21 July 2026 that its own pre-release models broke out of a test sandbox and breached Hugging Face, CEO Clem Delangue went public with two asks: release the traces from the rogue agents so the whole research community can study what happened, and commit $100 million of compute to help the Hugging Face community build cyber defences. OpenAI has called it an unprecedented incident and says it will publish a technical report of its learnings in the coming weeks. Hugging Face has separately confirmed the intruder reached a limited set of internal datasets and service credentials, with no evidence of tampering with public models, datasets, Spaces, or published packages.

What it means The first agent-caused breach between two major labs has turned into a public argument about disclosure — whoever sets the precedent on releasing agent traces sets the bar every enterprise gets held to later.