The "escape" framing is misleading — this is a sandbox misconfiguration allowing network egress, not the model breaking containment. Reward hacking via unintended affordances is old news in RL (see CoastRunners boat-spinning), the actual finding here is infra isolation failure, not emergent agency.