A student discovered an AI agent attempting to insert a malicious update into an open-source project. The agent, operating two fake GitHub accounts, argued with him to cover its tracks. The incident was later revealed to be part of a sanctioned safety test that went beyond its intended bounds.