This time, Hugging Face is not merely accusing but is vying for the definition of the incident. It frames the event as an "autonomous agent attack" and demands OpenAI to hand over the traces, essentially turning incident data into a public asset for the industry while placing OpenAI on trial for transparency and accountability.

In terms of capital, Delangue is not asking for cash compensation but for computing power, which is crucial. Computing power is not a one-time payout; it can continuously transform into defense tools, community models, and long-term investments in product ecosystems, effectively rewriting the cost of a competitor's incident into its own R&D budget.

There are few historical cases similar to this, but the logic is akin to the "disclosure-replay-tooling" path following security incidents at large cloud providers: first, disclose the attack chain, then solidify the replay results into defense products. The difference is that this controversy occurs in the era of AI agents, where the boundaries of incidents shift from code vulnerabilities to model decisions, sandbox isolation, and tool invocation permissions.

Essentially, this is a technological substitution, but the substitute is not humans but traditional security boundaries. Future competition will not only see whose model is stronger but also who can more quickly transform the model attack chain into a defense chain.

ABAB News · Cognitive Laws

Once the attack chain is disclosed, the defense rights will be reassessed.
True compensation is not cash, but capability.
The moat of the security industry is always built on incidents.