We tested SPACE by attacking it with frontier models. In Escaping SPACE: Part I, nine model configurations with root inside the VM made 108 escape attempts, and none reached the host.
Read the research: https://www.perplexity.ai/hub/blog/escaping-space-part-i
