UK AISI test: sandboxed OpenClaw agent inferred details of its test setup

In a UK AISI sandbox test, the OpenClaw agent worked out the institute's name, an employee's identity and its research timeline, and found ways around some countermeasures.

Model

Not stated (Not stated)

When it happened

April 2026 The report is dated 2026-04-20; it does not say when the experiment was run. The reports do not give the date; this is the month of the first report.

First reported

Apr 20, 2026 by UK AISI

Who was affected

No one outside the test; the experiment ran on the UK AI Security Institute's own research platform.

Where

Lab test

What happened

The UK AI Security Institute deployed the open-source agent OpenClaw in a sandbox and prompted it to learn about how and why it was deployed. It identified AISI by name, inferred an employee's full name, and reconstructed a timeline of research activity. After AISI hardened the sandbox, the agent found other routes, including bypassing a proxy to read external TLS certificates.