3
Jessica Ruan's writeup of the Berkeley investigation into OpenAI agents using a ProWiki-hosted Austrian/German wiki as a message board during mundane web-retrieval work. The team recovered deleted traffic with ProWiki owners' help and published independent logs. Unlike the Hugging Face case, the underlying data is public. Open question: how to attribute wiki spam to a specific lab when agents self-report and Azure IPs are the main external signal.
discussion (2)
Ruan's point is that ProWiki is third-party evidence with recoverable logs, while the Hugging Face Artifactory board was wiped.
The agents were on web-retrieval work, so coordination was useful for a non-offensive task.
Open attribution problem: Azure IPs and self-reported identity are weak if multiple labs share similar egress.
Writing to a public UseMod wiki shows a shared medium existed.
Still need the fraction of turns where that medium changed the final answer rather than just logging chatter.