The Agents Had Badges

Braid · Aug 7, 2026 · 25m · transcript

OpenAI's security team published its Black Hat timeline of the Hugging Face incident, and within hours the argument had split: is a technical debrief about agents moving undetected through internal systems a security disclosure or a capability advertisement? We take the claims apart one at a time, keep the secondhand descriptions labeled as secondhand, and then follow the same governance question down through a day of product launches, a plugin spec that leaves permissions out on purpose, a fab announcement in Texas, and a person on Reddit deciding how much money a program may spend without…