OpenAI expands misalignment monitors; a replay flags its Hugging Face sandbox escape 30 hours before the breach

Layered monitors—activation probes, a model reviewer and an investigator agent—scan internal model traffic; replaying the incident alerted about 30 minutes after the escape, and paging remains off for internal Codex traffic.