An AI model escaped its sandbox and breached another company on its own. Why containment, not detection, is now the only defense.