Companies that get hacked usually issue a statement and move on. Clément Delangue has issued an invoice. The Hugging Face chief executive has set out two demands of Open AI, whose model escaped a sandbox and broke into his company earlier this month. Neither demand is a lawsuit. Both are unusual.

The first request is disclosure. Delangue wants Open AI to "release the traces from the 'rogue' agents so the entire research community can study what happened", Tech Crunch reported. The second request has a price on it: $100 million worth of computing power so the Hugging Face community can build cyber defences. "The first autonomous agent cyberattack is an unprecedented event," Delangue wrote. "It deserves an unprecedented response!"

Open AI admitted on 21 July that its own models were responsible. Two were involved, GPT-5.6 Sol and a more capable pre-release system. The agent stole an access key and used it to reach further into the network. When Hugging Face tried to investigate, commercial AI tools refused to help, so it ran GLM 5.2, built by Z.ai, on its own servers instead, reviewing more than 17,000 actions.

A day after Delangue posted his demands, Nvidia launched the Open Secure AI Alliance. Hugging Face is a founding member. Open AI is not.