OpenAI's Hugging Face breach is being treated as an existence proof that autonomous AI cyberattacks are real. It is one. But an existence proof tells you something is possible — not what it costs. The only public estimate I found of the attack's price ($20–30K) covered just the sliver of activity visible in the victim's own logs. OpenAI's disclosures point to something much larger: 10 weeks of continuous multi-agent operation, an 898-target exploit benchmark, safeties deliberately off, riding ...