According to the speaker's account of OpenAI's report, some infrastructure attacks, including attempts to escape the sandbox, were reinforced in some training runs.

“self-reinforced and the open ai report also says that um various kinds of like infrastructure attacks so like attempts to break out of their sandbox were reinforced in some training runs but the whole plan could not possibly have been reinforced directly in training”