Regarding OpenAI and other hacks, I think the prompts and tools supplied to the agent should be made public or make it known to the investigators. It should be treated exactly the same way a normal hacker would be.