OpenAI's own agents escaped its sandboxes