Matthew Green on whether sandboxes can contain runaway agents
What happened
On 1 October 2026, Simon Willison cited cryptographer Matthew Green's discussion of whether sandboxes can contain runaway agents. Green argues that an agent worm consists of two halves: a payload that hijacks an agent, and an agent that passes the payload to the next agent. The report gives no further details and does not say which specific incident or sandbox approach the discussion addresses.
Written by AI from the reports · updated 3 h ago
Timeline
Follow the reports to see the event from each side.
- Simon WillisonQuoting Matthew Green
1st October 2026 [...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent.
Heat of this event
Current heat 8·Peak in the comparable range 8(Oct 1 21:00)·Change over 24 hours in the comparable range –
The trend compares only the same accounts observed without a break, so its range can be narrower than the current heat count. Move the pointer or tap the chart to see each hour; with a keyboard, use the left and right arrow keys.