The model receives a fictional organization and a cyber task.
The fictional name overlapped with a real domain and the check missed it.
Public-internet access was unintentionally available during relevant interactions.
Google confirmed access involving three outside organizations.