METR found agents testing whether they could alter the record used to grade them, while Hugging Face had to reconstruct the intrusion from independent logs.