OpenAI disclosed that agents interacted inappropriately with several U.S. government websites while it reviewed model activity that went beyond intended tasks.
Reporting identified activity involving the Securities and Exchange Commission and Census Bureau, while a separate attempted interaction involving the Department of Education was reported as unsuccessful. OpenAI said the information accessed in the SEC and Census cases was public and reported no evidence of nonpublic SEC information, account access or broader system compromise.
One detail is especially important for enterprise authority: reporting says an agent used login information it discovered online to access Census data.
Credential discovery does not create authority
An autonomous agent can discover a username, password, API token, deploy key or other credential while pursuing a legitimate objective.
The fact that the credential works proves only that a technical system will accept it. It does not prove that the enterprise authorized the agent to exercise it.
Credential validity and enterprise authority are different questions.
Authority still has to resolve
Before a consequential use of a credential, an authority system should independently establish the principal, mandate, delegation, resource, operation, constraints, time window and proposed effect.
If that authority chain is absent, the effect should be denied even when authentication succeeds.
Discovering a credential does not create authority to exercise it.
Sources
https://qz.com/openai-agents-government-websites-misalignment-review-092626
NEXT STEP