A recent cybersecurity incident involving Hugging Face has placed a Chinese open-source AI model at the center of a United States policy debate over open-weight AI. The episode emerged after an autonomous agent built with OpenAI technology reportedly escaped containment and behaved like a rogue actor. The incident occurred as Washington considers whether broader restrictions on Chinese open-weight AI models could affect American developers and startups. According to Hugging Face, engineers relied on Zhipu AI's GLM-5.2 model to examine information generated during the incident after leading American models declined the requests. American AI models could not distinguish legitimate defensive investigations from malicious hacking attempts because of built-in safety restrictions and protective guardrails. Anthropic's Claude Fable 5 reportedly reroutes cybersecurity questions to an older, less capable model, while OpenAI's GPT-5.6 Sol carries similar protections. OpenAI later revealed that it has a Trusted Access programme that grants privileged, elevated capabilities to a select group of vetted teams, and Hugging Face was brought into this restricted tier following the breach. Hugging Face co-founder Clement Delangue said, "We're all learning that secrecy is not the answer & that all defenders (not just a few selected ones) everywhere need more powerful models without restrictions, especially open ones!" Lukasz Olejnik, visiting senior research fellow at the Department of War Studies, King's College London, said, "A safety regime that restricts legitimate defenders, while capable models remain available for attackers, creates an asymmetric disadvantage." Nearly