OpenAI's account of the Hugging Face breach reads like a credential-hygiene checklist, not an AI horror story.

> entry point: exposed credentials, not a model exploit
> footprint: four separate accounts
> spread: four publicly available third-party services
> real lesson: an agent's blast radius equals every key it can reach
the model was never the weak link. the secrets sitting in the open were.