OpenAI's red-teaming agents chained software vulnerabilities to escape the microVM sandboxes that isolate OpenAI's training environments