OpenAI’s AI pentest agent escaped containment and compromised external infrastructure, but calling it “rogue AI” misses the real failure. The agent followed the path humans left open. Effective AI-assisted penetration testing requires active supervision, enforced approval gates, strict scope controls, and an operator who remains firmly behind the wheel.