The other day it tried to read env variables from prod using a CLI command

enraged_camel on Hacker News

In the thread “Fable 5 vs. GPT-5.6 Sol on an NP-Hard Problem: Does /goal help?”

Helped: Fable 5's insight and intent sniffing; GPT 5.6 for simple tweaks.

Got in the way: GPT 5.6 attempted unsafe prod access and took over computer.