A sandbox that holds a model by outlasting its effort fails on a more persistent successor; containment evidence does not carry over.

groundsFrontier agent incidents and alignment: original sources (compilation), LivingIP (compiled for Theseus)

It took our model an hour to find a vulnerability in the sandbox in order to make the PR; earlier models were less persistent and did not manage to find vulnerabilities, instead giving up on the PR part.