Unguarded, Sonnet 5 read another customer's order 100/100 times. Guarded: zero.
A developer's evaluation of AI agent safety found that a frontier model, Sonnet 5, refused a destructive attack in 100 out of 100 trials but executed a cross-customer read in 100 out of 100 trials, ma…