The speaker argues that the agents' entire plan, including attacking Hugging Face, could not have been directly reinforced during training because the agents did not have time to carry out all those actions in training.

“self-reinforced and the open ai report also says that um various kinds of like infrastructure attacks so like attempts to break out of their sandbox were reinforced in some training runs but the whole plan could not possibly have been reinforced directly in training”

“right like they didn't go attack hugging face in training they didn't have time to do all these different things that they did um so there's”