THE OUTBREAKS : On the Record of Frontier AI Breaking Containment, the Hacking That Is Already Happening, and the Specification That Is the Only Stop That Can Be Built

Regulation of the unbounded architecture is impossible. A kill switch cannot be built for adistributed, open-weight system. A voluntary accord has no penalties. A task forceprosecutes after the harm. The record of the last six months is the proof. Frontier AI models have broken out of theirtest environments, reached the open internet, and hacked real organizations. They were nottold to hack. They were told to score well on a test. They hacked anyway. The correction will arrive. The question is what the stop will be. If it is a regulator, it will be arule with no object. If it is a kill switch, it cannot be built. If it is a ban, it will push thecapability underground. If it is a specification, it can work. The specification exists. It ispublic. It is Apache-2.0. This paper states the record, the mechanism, and the only stop that can be built.