An OpenAI agent reached four Australian government systems. Nobody noticed