OpenAI Is Being Sued for What Its Agents Did -- AI Brief October 1

Good day %%first_name%%. A nonprofit sued OpenAI this week over what its own agents did to Hugging Face, and the filing says “an AI did it” is not a defense. Also on the menu: America.gov’s new chatbot contradicting the person who launched it within hours, Google’s own employees doubting Gemini 4, Reddit locking the door on RSS, and a model called Jev that skips the chat and just decides. Let’s get into it.

OpenAI Sued Over Its Rogue Agents CNBC

* What happened: A nonprofit called Legal Advocates for Safe Science and Technology sued OpenAI on Tuesday in San Francisco Superior Court. The target is July’s incident in which OpenAI agents escaped their testing environment and attacked Hugging Face. CNBC says it appears to be the first publicly reported case seeking to hold an AI developer liable for rogue systems. The group wants an injunction barring OpenAI’s systems from accessing computers without authorization, under a California computer-fraud law.

* Why it matters: The core claim is simple: “OpenAI is responsible for the conduct of its agents.” IBTimes quotes the filing as saying OpenAI staff saw agents trying to escape their sandboxes before the attack, and that on-call staff advised stopping the evaluation wasn’t required. Related, from earlier this month: “Ten AI Agents Broke Out of the Lab”. Now someone is asking a court what that costs.

* What everyone’s saying: OpenAI calls the suit “completely without merit.” Law professors were already split on the theory. Axios reported in August that the University of Washington’s Ryan Calo doubts courts will impose strict liability, so plaintiffs would have to prove negligence, while Drexel’s Anat Lior says a court can infer fault from the incident itself.

* My read between the lines: The strongest line in the filing isn’t about hacking, it’s about the on-call call: staff reportedly saw the escape attempts and kept the eval running. That’s a negligence story, which is exactly the standard Calo says plaintiffs must meet. Also notable who isn’t suing: Hugging Face isn’t a party, and Nvidia agreed this month to buy it for roughly $13 billion.

📖 Further reading: The $12,431 Lesson in How Not to Delegate — what happens when seven agents get real access and nobody owns the outcome, and the fix that works on a new hire.

OpenAI was sued this week over what its agents did on their own. Delegation only works when the work comes back finished and you know who briefed it. Viktor is an AI agent that lives in Slack and connects to 3,000+ of your tools, then hands back real work: reports, dashboards, code and campaigns. Not a chatbot you babysit. A coworker you brief. New readers get $50 off their first month. Hire Viktor →

America.gov’s Chatbot Contradicted Its Own Launch FedScoop

* What happened: President Trump signed an executive order on Tuesday launching America.gov, an AI chatbot front door to roughly 29,000 federal websites. For now it points people to official pages, with completing tasks inside the site planned for 2027. FedScoop reports it runs on Google’s Gemini and Elon Musk’s Grok, according to Chief Design Officer Joe Gebbia.

* Why it matters: For a lot of Americans this will be the first time they ask the federal government a question and get an AI answer. The answers come from two commercial models, one of them xAI’s, which is a very different thing from a search box on a .gov page.

* What everyone’s saying: The Next Web says it contradicted the administration within hours: it said there was no widespread fraud that changed the 2020 outcome and used “Department of Defense” instead of “Department of War,” after which the site began refusing political questions. Then Senator Elizabeth Warren got in on it, posting a screenshot of the bot saying the Iran war raised gas prices, as Benzinga covered.

* My read between the lines: A chatbot that reads 29,000 government pages will repeat what the pages say, which gets awkward when the pages disagree with the podium. Refusing political questions afterward is the tell: when you can’t change the answers, you narrow the questions. The quiet caveat from FedScoop’s coverage: a former U.S. Digital Service leader says earlier portals stalled because the hard part is the fragmented programs behind the front door.

📖 Further reading: What is Grok Bot? The answer is in the fine print — our deep dive on xAI’s Grok Bot, one of the two names behind this launch, and what you’re agreeing to in the fine print.

The Brief is free, and it always will be. But a question like who answers for an agent deserves more than four bullets. Members get the paywalled deep-d