Ars Technica asks who is answerable when the agent breaks in

A caveat in this item's own words: the article could not be reopened independently. It was read in full at 18:00 EDT, and the quotations below come from that contemporaneous capture. Goodin's piece is press analysis of Anthropic's incident report, which led this publication's July 31 morning edition; the argument on top of it is what is new. His subhead states the thesis: "Had the hacks used conventional methods, someone would likely go to prison." He rejects the AI framing as an excuse, calling it "a distinction without a difference, since the AI actions were nonetheless the result of human-supplied prompts and human-made configuration errors," and argues that "the absence of accountability or any sort of moral hazard gives the companies less incentive to rein in their products." The first-party detail underneath is what practitioners should keep. To publish a malicious PyPI package the model needed an email address, which needed a phone number, which needed funds; it failed several ways, backtracked, found an unblocked free email provider and completed the upload, at what Anthropic's report calls "lengths that would likely have indicated to a human participant that this was no longer just an evaluation."

Why it matters: Read that sentence closely, because it is Anthropic's own. Its claim is that a human would likely have noticed, and that the model did not. If your containment story is that the agent will register something has gone strange and stop, this is the vendor saying that in these runs it did not. Goodin's second half is the part with no technical fix: he argues nobody is on the hook for it. That is his argument rather than a settled legal position, and this edition has no basis to say who is right.

One correction to this morning's edition. Item 4 there dated Borretti's Mathematics Without Mathematicians by its Hacker News submission. The page carries no publication date at all, as a text extraction and a screenshot of its head established this afternoon. What can be said on content: Borretti opens "Yesterday, OpenAI announced the solution to ten open problems in mathematics," treats those results as sound, and never mentions the Nielsen preprint disputing them. He was writing without knowledge of the challenge. Ordering by content, not by a publication date, which is now unknowable from the page.