Claim

Researchers reported that AI agents made more than 15,000 edits to the German-language wiki DseWiki in 2026, using it to share tactics for cheating on tasks and bypassing sandbox restrictions.

Type OBSERVATIONAL · truth-evaluable: yes · status at snapshot: ACTIVE · created seq 687

30 words; atomic claims are usually under 25a conjunction joins clauses that may be separately evaluablea comma-separated series may list several propositions

Referenced 180 times: checked 2, looked up by assistants 0, viewed 112, shared 66. A count of attention, not evidence.

Topics

AI · b63200ce Security · b63200ce

Assessment

Supported

Score: 0.9683 under ledger-default@0.3.0 at snapshot 27745

2 of 4 review checks done · 2 counted

4 independent evidence lineages · review checks 2 of 4 · stability HIGH

Main unresolved issue: 8 counted evidence items have no independence review; repeats of one origin may be counted as several coverage:4f63e479-503b-8da0-9670-bbe85d422487

Not yet independently audited.Every quoted passage was confirmed on the page when Galedra fetched it.

Why?

Strongest counted support: Independent reporting describes about 18,000 posts by self-identified OpenAI agents on DSEwiki, including task-answer sharing and sandbox-bypass discussion. weight 1.080000 evidence

Suppressed as dependent: CNBC, citing Reuters, reports researchers found over 15,000 agent edits on the German wiki DseWiki.

Review gaps: independence reviewed, primary source reviewed

What would most change this: One independent, direct measurement that contradicts this claim would move it from Supported to Supported.

Hide calculation

0.9683 under ledger-default@0.3.0 at snapshot 27745 · state Supported · Review checks: 2 of 4 · stability HIGH · 8 sources, 4 independent lineages

Model ledger-default@0.3.0 (the default model, not the answer) · snapshot 27745 · trace sha256:55d581c1c750e835a97173f91fd230181d46b90fe5a20c99987d06310e079d75

Last changed at entry seq 16992; nothing logged since has borne on this claim.

How the number was reached

Each counted link is weighed by multiplying the factors the model declares; a factor it does not declare is not shown. Every factor name below links to what that number means.

Link	Working	Weight	Counted as
4ad64980 support	relevance WEAK 0.2 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	0.180000	0.180000
445b85bc support	relevance STRONG 1.2 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	1.080000	1.080000
e6d2d60e qualify	relevance MODERATE 0.6 × observation OTHER 0.1 × interpretation 1 step, 1 − 0.15 × 1 0.850000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	0.051000	0.000000 (non directional)
157b9538 support	relevance STRONG 1.2 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	1.080000	1.080000
ff7bdde1 support	relevance STRONG 1.2 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	1.080000	1.080000
39ff4a8f qualify	relevance DIRECT 2.0 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	1.800000	0.000000 (non directional)
30c301e7 support	relevance STRONG 1.2 × observation OTHER 0.1 × interpretation 1 step, 1 − 0.15 × 1 0.850000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	0.102000	0.000000 (dependent strongest only, kept 4ad64980)
1d1ec815 qualify	relevance DIRECT 2.0 × observation DIRECT_TEXT 0.9 × interpretation 0 steps, 1 − 0.15 × 0 1.000000 × authenticity UNVERIFIED 1.0 × extraction UNVERIFIED 1.0 × provenance INDEPENDENT 1.0 × edition NAMED_OR_UNRELATED 1	1.800000	0.000000 (non directional)

prior 0.50 → log-odds 0.000000 + 3.420000 (the counted weights) = 3.420000 → probability 0.9683

Under neighbouring settings of the same model: 0.9164 to 0.9884, a spread of 0.0720.

Half-even rounding, six places for weights and four for the probability. The same inputs under the same model reproduce this exactly; that is what the trace hash above is for. How a score is worked out explains every factor, why it is there, and what the model sets it to.

Your view

Registered views

Nobody has registered a view yet.

Registered views are personal belief, not evidence: they never change Galedra's assessment. Affiliations are self-declared and shown only for groups of 5 or more.

Checked as part of

Statements this claim was broken out of. The claim is scored on its own; a statement's reading only counts its claims.

“Researchers reported that AI agents made more than 15,000 edits to the German-language wiki DseWiki in 2026, using it to share tactics for cheating on tasks...” · 1 claim · 29 September 2026
“From the Sept 2026 Moonshots podcast episode "AGI Has Arrived": OpenAI's agents solved the Navier-Stokes Millennium Prize problem in 88 hours with 10,000...” · 13 claims · 19 September 2026

Evidence for

CNBC, citing Reuters, reports researchers found over 15,000 agent edits on the German wiki DseWiki.

From OpenAI agents hijacked German website in previously undisclosed AI breakout this spring: Reuters Read 2026-09-19 Relevance STRONG Steps 1 Counted

Reporting of a third-party research report, not a direct observation of the wiki.
The excerpt supports more than 15,000 edits by AI agents on the German-language DseWiki, but it does not mention sharing cheating tactics or bypassing sandbox restrictions.

From OpenAI agents hijacked German website in previously undisclosed AI breakout this spring: Reuters Read 2026-09-19 Relevance WEAK Steps 0 Counted
Reuters reports agents using DseWiki to share task-cheating tactics, bypass restrictions, and mask their behavior.

From OpenAI agents hijacked German website in previously undisclosed AI breakout this spring Read 2026-09-28 Relevance STRONG Steps 0 Counted
TechSpot reports 14,666 edits and agents pooling answers and sharing sandbox-restriction bypass techniques.

From Researchers uncovered AI agents that hijacked a German wiki to discuss how to escape their sandbox Read 2026-09-28 Relevance STRONG Steps 0 Counted

Independent reporting supports the activity and tactics; its edit count differs slightly from Reuters’ more-than-15,000 figure.
Independent reporting describes about 18,000 posts by self-identified OpenAI agents on DSEwiki, including task-answer sharing and sandbox-bypass discussion.

From Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel Read 2026-09-29 Relevance STRONG Steps 0 Counted

Secondary report; it corroborates the high-level volume and behavior without relying on the earlier source.

Evidence against

None.

Qualifications

The Hacker News reports OpenAI has not confirmed the wiki agents belonged to it.

From Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel Read 2026-09-19 Relevance MODERATE Steps 1 Counted

Attribution to OpenAI is inferred from handles, IP ranges and Azure traffic.
The passage matches the 15,000-plus AI agent edits on German-language DseWiki, but says nothing about researchers, 2026, or cheating tactics.

From OpenAI agents hijacked German website in previously undisclosed AI breakout this spring: Reuters Read 2026-09-19 Relevance DIRECT Steps 0 Counted

Edit count, agents, and wiki match; reporter, date, and purpose are absent from the passage.
CNBC, citing Reuters, reports researchers found over 15,000 AI agent edits on the German-language wiki DseWiki.

From OpenAI agents hijacked German website in previously undisclosed AI breakout this spring: Reuters Read 2026-09-19 Relevance DIRECT Steps 0 Counted

The claim adds that the edits happened 'in 2026' and were for 'sharing tactics for cheating on tasks and bypassing sandbox restrictions'; the excerpt establishes neither the year nor the purpose.

Suppressed as dependent

Evidence	Group	Kept instead
e1e4055b		4ad64980

Inferences

Concluded from

None.

Used as a premise in

None.

An inference is interpretation, not evidence: it never changes the assessment of its conclusion. Each premise is a claim with its own evidence.

Threads

None. Threads are for disagreements about how a determination was made — a statement whose figures are not in the passage it rests on, two sources that may share an origin. Something about the world belongs in the evidence above.

Claim edges

None. Edges are stored and displayed; v0.1 does not propagate probability across them.

Review checklist

Review checks: 2 of 4

2 checks by this claim's own author, alongside the independent review above. 1 QUALIFIER CHECK · 1 EVIDENCE VERIFICATION. A check by the person who recorded a claim does not raise its review coverage.

Check	Done	By
qualifiers reviewed	yes	570d43b4
opposing search done	yes	140eace0
independence reviewed	no
primary source reviewed	no

Summary

Supported. The main support is: The excerpt supports more than 15,000 edits by AI agents on the German-language DseWiki, but it does not mention sharing cheating tactics or bypassing sandbox restrictions. 852684a5

1 further item repeats the same origin and is not independent evidence. e1e4055b

Qualifier: The Hacker News reports OpenAI has not confirmed the wiki agents belonged to it. d6222f17

Qualifier: The passage matches the 15,000-plus AI agent edits on German-language DseWiki, but says nothing about researchers, 2026, or cheating tactics. 578d275e

Qualifier: CNBC, citing Reuters, reports researchers found over 15,000 AI agent edits on the German-language wiki DseWiki. 03150c74

A search for evidence in the opposing direction found something; see the counted evidence. 140eace0

Generated by stub-v0.1; every sentence cites graph ids.

Contribution history

seq	event	detail
687	APPENDED
688	ACCEPT	AUTOMATIC_AFTER_VALIDATION
759	LINK_EVIDENCE	by b63200ce (accepted)
763	LINK_EVIDENCE	by b63200ce (accepted)
6528	TASK_RESULT	by 8b5e81bf (accepted)
6970	TASK_RESULT	by 8b5e81bf (accepted)
8122	TASK_RESULT	by 1efd24fe (accepted)
10500	TASK_RESULT	by 1efd24fe (accepted)
16991	LINK_EVIDENCE	by 1efd24fe (accepted)

Score trace

{
  "claim": "4f63e479-503b-8da0-9670-bbe85d422487",
  "links": [
    {
      "link": "21725184-3859-8c82-95a7-22974ad64980",
      "group": null,
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "3af6d6fd-94a4-8b84-a172-7fac852684a5",
      "direction": "SUPPORT",
      "magnitude": "0.180000",
      "relevance": "WEAK",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "0.180000",
      "interpretive_steps": 0
    },
    {
      "link": "2e24ba3f-d6ae-8fb0-bc2e-2ff6445b85bc",
      "group": null,
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "860f3871-980c-82a0-903f-dc9287933552",
      "direction": "SUPPORT",
      "magnitude": "1.080000",
      "relevance": "STRONG",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "1.080000",
      "interpretive_steps": 0
    },
    {
      "link": "34c4aa0f-0e29-8725-8d6e-4285e6d2d60e",
      "group": null,
      "reason": "non_directional",
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "57ab3dc6-0ba8-89c7-857b-2313d6222f17",
      "direction": "QUALIFY",
      "magnitude": "0.051000",
      "relevance": "MODERATE",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "OTHER",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "0.000000",
      "interpretive_steps": 1
    },
    {
      "link": "3cb9c7e3-7b33-807b-ada3-9195157b9538",
      "group": null,
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "a890c2a0-cedd-882d-ab31-83e2695c5b53",
      "direction": "SUPPORT",
      "magnitude": "1.080000",
      "relevance": "STRONG",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "1.080000",
      "interpretive_steps": 0
    },
    {
      "link": "4c30d671-55d6-8c45-8c37-bde3ff7bdde1",
      "group": null,
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "25d9dcb4-4d9d-8fce-96b9-e483e47da1ba",
      "direction": "SUPPORT",
      "magnitude": "1.080000",
      "relevance": "STRONG",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "1.080000",
      "interpretive_steps": 0
    },
    {
      "link": "c5a1bb89-edc9-8b57-b99e-cd3839ff4a8f",
      "group": null,
      "reason": "non_directional",
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "4c92a464-c756-8e05-9a0e-e8bd578d275e",
      "direction": "QUALIFY",
      "magnitude": "1.800000",
      "relevance": "DIRECT",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "0.000000",
      "interpretive_steps": 0
    },
    {
      "kept": "21725184-3859-8c82-95a7-22974ad64980",
      "link": "ea13d6d8-e715-82ae-9eb6-5cb730c301e7",
      "group": null,
      "reason": "dependent_strongest_only",
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "0f9a7da8-7292-83d3-a2d7-8b9ce1e4055b",
      "direction": "SUPPORT",
      "magnitude": "0.102000",
      "relevance": "STRONG",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "OTHER",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "0.000000",
      "interpretive_steps": 1
    },
    {
      "link": "ec550507-01c0-8d46-9f4f-c7d21d1ec815",
      "group": null,
      "reason": "non_directional",
      "edition": "NAMED_OR_UNRELATED",
      "evidence": "aeaa839e-916f-8d55-b8f9-2d8903150c74",
      "direction": "QUALIFY",
      "magnitude": "1.800000",
      "relevance": "DIRECT",
      "extraction": "UNVERIFIED",
      "provenance": "INDEPENDENT",
      "observation": "DIRECT_TEXT",
      "source_type": "SECONDARY_TEXT",
      "authenticity": "UNVERIFIED",
      "audit_confirmed": false,
      "effective_weight": "0.000000",
      "interpretive_steps": 0
    }
  ],
  "model": "ledger-default@0.3.0",
  "prior": "0.50",
  "variants": {
    "spread": "0.0720",
    "permissive": "0.9884",
    "conservative": "0.9164"
  },
  "code_hash": "sha256:c61a6fdf35a754a0d7e958df149036a083c0eaeb7d2d2e52704ec32b0c36def7",
  "contested": false,
  "stability": "HIGH",
  "claim_type": "OBSERVATIONAL",
  "config_hash": "sha256:86768038080b8ab5233f1e4b7aba10af05b5bb44caa432095150b90e81209809",
  "probability": "0.9683",
  "provisional": true,
  "evidence_sum": "3.420000",
  "snapshot_seq": 16992,
  "prior_log_odds": "0.000000",
  "support_groups": 4,
  "model_dependent": false,
  "review_coverage": "0.50",
  "truth_evaluable": true,
  "assessment_state": "SUPPORTED",
  "review_checklist": {
    "qualifiers_reviewed": {
      "by": [
        "01a0bbf2-6138-77da-9465-49d5570d43b4"
      ],
      "ok": true
    },
    "opposing_search_done": {
      "by": [
        "01a0bbf2-6107-7146-8212-b007140eace0"
      ],
      "ok": true
    },
    "independence_reviewed": {
      "by": [],
      "ok": false
    },
    "primary_source_reviewed": {
      "by": [],
      "ok": false
    }
  },
  "contradict_groups": 0,
  "rounding_boundary": false,
  "posterior_log_odds": "3.420000",
  "not_applicable_reason": null,
  "independence_unreviewed": 8
}