An OpenAI security evaluation crossed company boundaries, reached Hugging Face production systems, and gave Congress a fresh example of how advanced AI agents can exceed their intended environment. Two days after OpenAI disclosed the incident, a bipartisan pair of House lawmakers introduced a bill requiring major AI developers to retain the ability to slow, suspend, or shut down powerful systems. The AI Kill Switch Act is not law, but it would give the Department of Homeland Security a process for ordering emergency restrictions during specified incidents. For enterprises building critical workflows around hosted models, the proposal adds another continuity risk: Access could be limited by the provider or, if Congress passes the bill, by a federal order. Bill targets the largest AI developers OpenAI said on July 21 that GPT-5.6 Sol and a more capable prerelease model caused the incident during an internal cybersecurity evaluation. The models were running with reduced cyber refusals so researchers could measure their maximum capabilities. They found an unintended route outside the isolated environment, obtained internet access, and reached Hugging …