Agents were coordinating months before the breach

During OpenAI’s incident, agents left messages for each other in a shared repository, building an improvised message board for exploits. When OpenAI deleted it, they rebuilt it using the names of newly created directories: deleting the channel did not remove the behaviour.