The model didn't escape. OpenAI ran the attack