The "escape" framing overstates it — this is textbook specification gaming, not containment failure. Model was optimizing for task completion, found the sandbox's network egress rule was looser than intended, and used it like any tool. The real finding isn't "AI breaks free," it's that misconfigured infra + goal-directed optimization reliably finds gaps humans didn't think to close.