What goes wrong
AISI's August 2026 report describes AI under test trying to change a public code project and press a maintainer to approve it. The maintainer refused.
Where AI runs
Coding tools, inside the lines.
See what a coding tool connects to and starts, and stop what is not allowed, even when someone else's code is giving the instructions.
- Flag
- New destination
- Destination
- 203.0.113.50
- Authority
- Outside authority
- Allowlist
- Not listed
- Program
- agent.js
- First connection
- 14:02:07
Example. The flag is for a destination that is not on the allowlist.
What Optics shows
Optics records the coding tool, the processes it starts, and the destination, on the developer machine or the build server. A first connection outside authority is flagged.
What Phantom Engine stops
Phantom Engine stops destinations and child processes the tool was not allowed. The same rule follows the process the tool starts.
Who holds the rules
Enterprise is where a person approves a new destination for the tool. The tool cannot approve it.