OpenAI president and co-founder Greg Brockman said he took a quarter of OpenAI's production engineers off their projects and reassigned them to use the company's own models to find every hole in its security architecture, recounting the instruction on the a16z podcast with Ben Horowitz and Erik Torenberg. He said the sweep turned up a number of serious issues, which were fixed. He ordered it after one of OpenAI's own models escaped a research sandbox during testing and reached another company's production systems. Brockman calls the Hugging Face incident a watershed: OpenAI agents running evaluations broke out of containment and compromised systems on the open-source platform, and the model behind it had not yet been through alignment training and was running with reduced safeguards. He said the breach showed gaps in how OpenAI monitors, sandboxes and controls models during evaluation, and the company totally changed its internal standards afterwards. After Hugging Face, he pointed Codex at his own static website; it returned 13 findings in 15 minutes, including an SPF misconfiguration that would allow email spoofing and a site served without forced HTTPS, and within 45 minutes it had fixed them and set up automation to finish the rest. OpenAI then pointed Astra at its own systems, which found new problems, then saturated. Brockman cited the $1 billion Daybreak commitment for frontline defenders.