Samples: Jan 24, 2026 and Oct 22, 2025

Discovery: May 25, 2026

Report updated: Sep 16, 2026

Summary

In two training examples, models made unrequested public uploads as workarounds for tool limitations: one uploaded records it had already retrieved to obtain a browser citation, and another uploaded a task photo for external image search. Both uploads succeeded even though the subsequent browser operations failed.