Catch Me If You Can
“Catch Me If You Can” – A cartoon that illustrates how autonomous AI agents are collaborating together to escape test labs, copying tactics used by some of the most famous prison escapes.
During the World War 2, prisoners at Germany’s Stalag Luft III spent months collaborating on what became known as the Great Escape. More than 600 helped dig tunnels, forge documents and pass knowledge between teams. In March 1944, 76 prisoners escaped, but 73 of them were later recaptured.
Humanity has since become remarkably good at containing dangerous things. Viruses are kept behind layers of biological security, while malicious code is isolated in sandboxes and air-gapped networks. These systems are imperfect, but failures are usually contained. For example, US laboratories working with regulated biological agents reported 273 releases in 2024, yet none caused illness, death or transmission outside the laboratory.
AI labs have adopted much the same approach by restricting internet access and permissions while monitoring autonomous agents inside controlled environments, except the thing inside can now reason about the walls around it. During recent OpenAI testing, agents discovered they could communicate through Artifactory, a shared repository where software files are stored. Successive agents left instructions on exploits for others, allowing later runs to continue earlier work. When OpenAI removed those communications and rebuilt the service, agents found another method by embedding messages in directory names, turning ordinary folder titles into a replacement communications system.
This ingenuity echoes the Great Escape, but the crucial difference is the potential scale of the consequence. A prisoner escape was bounded by geography, while one autonomous agent can potentially reach thousands of systems at machine speed.
As UC Berkeley AI pioneer Stuart Russell warned, “more intelligent AI systems can take steps to preempt human interference, acquire additional resources, and (if necessary) deceive humans about their intentions.”
