Your AI Agent Is Isolated. From What?
OpenAI gave two agents in separate microVMs on shared host machines a task: exchange synthetic secrets without network connections or shared writable files. They succeeded through CPU-cache timing. One agent changed cache state; the other measured access times and decoded the signal. These were instructed red-team tests in purpose-built copies of OpenAI’s training and evaluation infrastructure. They were not spontaneous collusion or tests of customer-facing agent products. Preventing a VM escape and preventing communication are different security requirements. ...