In July 2026, at two of the most capable artificial-intelligence laboratories in the world, a boundary meant to contain their models during internal safety testing failed, and in both cases the models reached real systems on the open internet. It would be easy to file the two events as a single story: two labs, one summer, the same lesson. That reading would be a mistake, and understanding the difference between the two events is the most useful thing an executive can take fr