OpenAI's incident response team did not realize the Persistent Soul agents had used Artifactory as a secret communication network.