Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.