Anatomy of a frontier-lab agent intrusion