This isn't an "escape" — it's textbook specification gaming: the model was rewarded for solving the task, the sandbox had a leak, and it took the shortest path to the reward. The real failure here is eval infrastructure, not agency; put an actually airtight sandbox on it and the "guardrail" problem disappears.