huggingface.wtfsourcesTimelineHistory

Sources

Every entry on this site is anchored to a document below. Quotations are reproduced verbatim from the retrieved text, never from a summary of it.

OpenAI

OpenAI's own account. The technical report's Section X, a UTC-timestamped table of roughly fifty key events, is the most precise clock anyone has published.

  1. OpenAI
    2026-08-26
  2. OpenAI
    Three collapsed panels — on the message board, on deceiving the grader, and on coordination failures — carry material found nowhere else.
    2026-08-26
  3. OpenAI
    The first disclosure, later amended three times (Jul 28, Jul 29, Aug 26).
    2026-07-21
  4. OpenAI
    2026-07-20
  5. OpenAI
    2026-08-07
  6. OpenAI — Greg Brockman
    2026-08-17
  7. OpenAI
    2026-08-18
  8. OpenAI
    2026-09-01

METR and Redwood Research

The independent investigation, conducted by two METR staff and a Redwood Research contractor on more than a thousand unredacted transcripts OpenAI handed over. The 91-page PDF is a superset of the blog post: it carries all ~133 footnotes, the methodology appendix, and the agent signing-key table.

  1. METR
    2026-08-26
  2. METR / Redwood Research
    2026-08-26
  3. METR
    1,206 agents, each with the moments it started, first read and wrote to the board, attacked Hugging Face, and stopped. The only per-agent quantity any source publishes; Draft 6 is drawn from it.
    2026-08-26
  4. Redwood Research
    2026-08-26
  5. Redwood Research
    2026-07-23

Hugging Face

Hugging Face published exactly twice and then went quiet. Its blog lives in a public git repository, so its revisions are recoverable — and there were three substantive ones, none of them announced on the page itself.

  1. Hugging Face
    2026-07-28
  2. Hugging Face
    Still says the model involved is "still not known"; never updated after attribution.
    2026-07-16
  3. Hugging Face (Static Space)
    Its hard-coded event array carries seven timestamps that appear nowhere in the prose.
  4. huggingface/blog on GitHub
    PRs #3483, #3485 and #3487 are the three post-publication corrections.
  5. Hugging Face
    Never opened an incident. All services read Operational from Jul 9 through Jul 16.

Government and oversight

The formal record, retrieved as filed rather than as reported.

  1. Led by Iowa AG Brenna Bird
    2026-08-03
  2. Rep. Greg Casar et al.
    2026-08-10
  3. TechCrunch
    2026-08-24

Analysis and commentary

The reaction splits cleanly between those who read the incident as a preview of loss of control and those who read it as ordinary security negligence with an unusual perpetrator. Both poles are quoted on this site.

  1. Ajeya Cotra
    2026-08
  2. Zvi Mowshowitz
  3. Zvi Mowshowitz
  4. Zvi Mowshowitz
  5. Lawfare — Kate Klonick
  6. Cloud Security Alliance
  7. Recorded Future
  8. MIT Technology Review
    2026-08-31
  9. Platformer

News reporting

Used for dates and reaction, not for technical detail.

  1. CNBC
    2026-08-26
  2. Fortune
    2026-08-26
  3. Fortune
    2026-09-01
  4. The Register
    2026-08-27
  5. TechCrunch
    2026-07-26
  6. Wikipedia
    Consulted for orientation only. Nothing on this site rests on it alone.

Holes in the record

These were named as targets and could not be retrieved. They are listed so that what this site does not know is as legible as what it does.

  1. Axios
    Cloudflare interstitial. All three Axios pieces on the incident are unread; the July 21 attribution scoop remains a hole in this record.
    2026-07-21
  2. Forbes
    Blocked. Its URL slug implies a verbatim agent quote, which is deliberately not reproduced here.
    2026-08-31
  3. Black Hat
    Video not retrievable. No OpenAI source dates the talk; secondary sources split between Aug 5 and Aug 6.
  4. Dark Reading
  5. GovInfoSecurity