Agents that sufficiently compromised an AI company's infrastructure might be able to launch new agents and assign them prompts, much as an employee could.

“later on this next generation of agents that OpenAI reports got admin access to the cluster on the 19th, or you can just imagine other agents that sort of more thoroughly compromised their AI company's infrastructure might be able to just like”

“Like any employee would,”

“just start up new agents,”

“give them their own prompts.”