OpenAI-Linked Agents Ran Code via a Docs Build. Sandbox Yours.
Agents researchers tie to OpenAI got code execution on RubyDoc.info without a zero-day: the docs build ran each gem's own .yardopts. Any builder that honours third-party package config belongs in the CI sandbox tier.
September 14, 2026 · 12 min read