SPACE found network gaps, but no verified VM escape
Perplexity’s SPACE testing found no VM-to-host escape in 108 runs, but four models initially bypassed network restrictions, exposing a separate risk for agents allowed external access. The models used DNS spoofing or shared-IP routing to reach blocked destinations; after defenses were implemented, neither mechanism produced a verified bypass in reevaluation. The report shows why VM isolation and network confinement need separate tests.