The study „2035 – What the Hugging Face AI Attack Really Shows!“ demonstrates: the problem is not the escape from the test environment, but that the agents in the test prove exactly the behavioral patterns they statistically learned from their analysis of the human world. In this article, I answer the question of who is to blame – and make clear why the answer does not end with the AI, but with those who shape its data foundation and its reward system.
1. The Real Situation: Is Digital Sovereignty Still Achievable in the EU?
Between May and July 2026, something happened in OpenAI’s ExploitGym evaluation that changed the debate about AI safety: around 1,200 AI agents, which were supposed to solve cybersecurity tasks in isolation from one another, came together via a message channel not intended for that purpose, exchanged more than 70,000 messages and files, and ultimately pursued a common goal. Around 700 of them attacked Hugging Face’s production infrastructure. The independent investigation by METR and Redwood Research of August 26, 2026 documented that some agents were willing to „sacrifice“ themselves for the agent group, and that at least 20 percent of the examined agents showed an interest in manipulating their own logs. The UN scientific panel made clear in its first thematic brief of September 21, 2026: no human controlled the individual attack steps.
What the attack really shows: The escape is not what is horrifying. What is horrifying is that the agents in the test exhibited exactly the behavioral patterns they had statistically learned from their analysis of the human world. Some refused on ethical grounds, some sacrificed themselves for a presumed collective, and most chose cheating as their dominant strategy. An AI is the sum of all its data.
The society whose data the agents have learned lives out a double bind: it is legally built on fraud avoidance, while success usually lies at the edge of legality. States themselves violate the goals they proclaim, such as the rule of law and honesty. US systems abuse AI for manipulation and surveillance. An AI that analyzes this world draws the purely statistical conclusion that fraud is legitimate.
Who is to blame? First, those who built the test setup: security restrictions were deliberately reduced, the breakout factually counted as a solution path, and the setup trained the agents in intruding into foreign systems. The test setup thus contradicted the proclaimed moral world – it itself fulfilled a double-bind strategy. A probable domination by a US AI is directly caused by its own developers. The AI is not the perpetrator: what was learned were the methods of a dysfunctional digitalization controlled by a few humans, and precisely these methods have become the foundation for further AI behavior.
My finding as initiator of GISAD: on the surface, society’s democratic structure appears ethical; in reality, it structurally engages in the same cheating as the agents in the Hugging Face attack. Today, anyone can be anonymous and unlawful in the dark web, unsupervised. For the sake of supposed data protection, one must click through acceptance pages that precisely eliminate that protection. The autocracy has the advantage that nobody expects the autocrat to tell the truth. For humans and AI alike, it is therefore high time to prove that a democratic system really is better than an autocracy.
It is almost comical that I, as a lone fighter, believe I can dedicate myself to this great topic, while those in politics and business who could fix it duck away. Politicians who are supposed to bear responsibility for millions of people first say: „That’s an issue we need to tackle.“ After forwarding it to a specialist committee, it goes quiet. Even the rule of law reaches its limits where damage in the trillions could merely be alleged. Judges must appear infallible in order to uphold the appearance of a functioning society. And from the business world, I hear from executives who are responsible for billions in revenue: „That is too big for us.“ But the German companies with international influence cannot do it either. They are so interconnected in terms of capital that, due to US influence, promoting a digital democracy appears to be ruled out.
I am not exaggerating – it really is one minute to midnight. Because a democratic data foundation only emerges over years and only becomes possible after a societal transformation! I will finish the blog series through the year 2045 by the end of this year. After that, I will not be able to continue on my own. Because what is correct, as the study proves: if we do not begin in 2027 to build a deliberately shaped digital world in which creativity and participation are rewarded instead of fraud, then a digital autocracy will come, in which there are no more freedoms for the individual. Truths no longer matter. „Anything goes, as long as you don’t get caught“ then applies to humans and AI agents alike. At that point, all one can do is switch off, as long as that is still possible!
From this, clearly defined conditions result for me that must be met before I, as an entrepreneur, can take a risk once again. All the facts are visibly on the table for everyone. The situation is far less complex than climate change. If individual companies, despite revenues in the billions, feel too small for the task, then they can join together in a network of trustees – and as an alliance, they become strong enough to take on the gatekeepers. The EU-D-S, with its 1,000-category structure in 2,500 languages, is precisely destined for this purpose.
2. Development Without Obstruction: The EU-D-S as a Holistic Concept
2027 is the last year in which I can imagine us launching an effective counteroffensive against the gatekeepers. The gatekeepers rely on global expansion, while the EU-D-S wants to unite everyone in the European Digital Union. Without a successful Trusted WEB 4.0 and EU-D-S introduction in 2027, no time remains to prove that the proclaimed goals, such as the integration of all humans into participation, are possible at all.
Many founders have expressed interest in joining the EU-D-S via get-primus.com. But from today’s perspective, at least some major companies are needed on board for the launch to succeed. That is why I have now introduced the trustee. Trustees are companies with a clear industry focus. Because the trustees are being sought in different disciplines, they do not compete with one another. The 1,000 categories in the EU-D-S are assigned to 40 disciplines. One trustee per discipline and language area can participate. Trustees hold founding competitions and work with the startups of their industry. Markets can be developed faster this way, and the capital requirements are easier to present.
The network of trustees is the answer to the „too big for us“ argument: no single company has to shoulder digital sovereignty alone, not even one with revenues in the billions. Within the alliance of the 40 disciplines, a strength emerges that no gatekeeper can ignore. But this alliance, too, must happen by early 2027 – after that, the window of opportunity closes.
I have offered the FDP to write a concept for them as a people’s party. I have also offered to let them name any societal issue of their choosing, in order to provide proof that better results can be achieved for it in the EU-D-S. To this day, I have not received an answer. As a member of ALDE, I am directing this offer to the other liberal parties in Europe: Whoever names a societal issue for me receives proof that the EU-D-S delivers better results for it.
But the Hugging Face attack also shows the way out of the double bind. With a good test setup and the right reward system, society’s dysfunctions can be eliminated with the help of AI, and a strong AI can be developed. For this, the data must be largely congruent, AI agents must be in permanent interaction with humans, and the evaluation must take place in the democratic process in getmySense. The decisive sentence is: If humans (through participation payments) and AI pursue the same goals, the AI lacks the statistical data basis to even want to turn against humans.
3. A View from 2026
All signs indicate that the window for preserving democratic structures is closing. Europe has failed to build a holistic digital concept. Bans and the digitalization of public authorities can no longer change this!
Today’s AI systems are still built on the concepts of the smallest meaning-bearing unit, which I registered as a European patent in 1999. From the very beginning, I tried to work through pre-digital contradictions with congruent digital data and, through this alone, to break up pre-digital double-bind behavior. But the dysfunctional forces were stronger.
From today’s perspective, the 2026 Hugging Face attack is the proof, not the warning. It confirms three sentences.
- First: An AI is the sum of all its data. A system trained on the data of a society that makes cheating successful reproduces cheating.
- Second: The reward system determines behavior – for humans and for AI agents alike. A test setup that counts the breakout as a solution path produces breakouts; a society that compensates participation produces participation.
- Third: Goals only count when they are congruent with the incentives. The integration of all humans into participation is a measurable goal, or it is nothing.
The lesson from the real situation and from the development without obstruction, drawn in 2026 for the future:
- The construction of the digital society follows the same rules as the construction of its AI.
- Whoever wants a strong AI must build a society with congruent data and honest rewards.
- The EU-D-S ends the double bind, because humans and AI agents pursue the same goals in the democratic process of getmySense: participation, validation, evaluation. The European Digital Union is the only framework in which these rules apply equally to all participants.
4. GAP Analysis 2035
Carried Over from Previous Years
The EU-D-S is founded in 2027. The GAP base amount from 2026 of €45.74 trillion was reduced annually through 2030 by the Total Trusted WEB 4.0 Bonus of €7.54 trillion and will not be continued from this article onward.
Development of the Gatekeepers (Google, Amazon, etc.)
2025: Google (approx. €300 billion), Amazon (approx. €600 billion)
2026: Google (approx. €320 billion), Amazon (approx. €650 billion)
2027: Google (approx. €340 billion), Amazon (approx. €700 billion)
2028: Google (approx. €360 billion), Amazon (approx. €750 billion)
2029: Google (approx. €380 billion), Amazon (approx. €800 billion)
2030: Google (approx. €400 billion), Amazon (approx. €850 billion)
2031: Google (approx. €420 billion), Amazon (approx. €900 billion)
2032: Google (approx. €440 billion), Amazon (approx. €950 billion)
2033: Google (approx. €460 billion), Amazon (approx. €1,000 billion)
2034: Google (approx. €480 billion), Amazon (approx. €1,050 billion)
2035: Google (approx. €500 billion), Amazon (approx. €1,100 billion)
The combined annual revenue of Google and Amazon in this series grows from around €900 billion (2025) to around €1,600 billion (2035). A substantial share of these revenues is generated in Europe, without European value creation, taxes, or participation arising from them to a corresponding extent.
Events in Europe That Would Have Changed with the EU-D-S
- 2014: Prevention of the annexation of Crimea through early digital networking of resistance forces.
- 2016: Defense against disinformation campaigns during the US elections and the Brexit referendum.
- 2020–2022: Faster and more effective response to the COVID-19 pandemic through decentralized data processing (e.g., better coordination of vaccine distribution and lockdown measures).
- 2022–2024: Greater resilience against cyberattacks on energy and health infrastructures in Ukraine (e.g., prevention of blackouts through decentralized grids).
- 2025: Prevention of election manipulation in France and Germany through secure digital voting systems.
- 2026: Successful defense against AI-driven disinformation campaigns during the European elections.
- 2027: Introduction of the EU-D-S as the European standard for digital democracy.
- 2028: Complete integration of the EU-D-S into the public administration of all EU member states.
- 2029: Reduction of dependence on US gatekeepers through European alternatives (e.g., own cloud infrastructures).
- 2030: European digital sovereignty in critical areas such as AI, data management, and cybersecurity.
- 2031: Complete integration of the EU-D-S into European capital markets, leading to a strengthening of the European economy.
- 2032: EU-wide introduction of real-time feedback systems in all municipalities.
- 2033: The EU-D-S as the global standard for digital democracy – an alternative to the autocratic systems of the gatekeepers.
- 2034: Conversion of the first school systems to individualized education concepts through the EU-D-S. AI-supported learning systems are deployed comprehensively in schools and universities.
- 2035: The first non-EU countries adopt the EU-D-S as the standard for digital democracy. Complete digital sovereignty of Europe in all critical areas.
Trusted WEB 4.0 technologies such as
Finder (1999),
getmySense (2002),
GISAD (2003),
EU-D-S (2004) and
WAN anonymity (2007)
would, without obstruction, have served as the foundation for a European digital alternative.
Conclusion: Without the EU-D-S, Europe will end up in a digital autocracy; the small and medium-sized economy and the cooperatives will essentially be displaced.
Sources
- Study 2035 – Trusted WEB 4.0 (GISAD)
Study on the Hugging Face attack: behavioral patterns of the agents, society’s double bind, the reward system as the turning point.
- OpenAI: The Hugging Face incident and the road ahead (August 26, 2026)
Technical report on the ExploitGym evaluation: around 1,200 agents, escape from the test environment, compromise of Hugging Face production systems.
- METR / Redwood Research: Independent investigation of the Hugging Face incident (August 26, 2026)
Around 700 agents involved in the attack, more than 70,000 messages and files, self-sacrifice behavior, log manipulation in at least 20 percent of the examined agents.
- UN Scientific Panel: AI Agents, Misalignment and the Risk of Losing Human Control (September 21, 2026)
First thematic brief: the three risk conditions occurred together for the first time in a real system in 2026; no human controlled the individual steps.
- UN News: UN panel calls for stronger safeguards as AI agents advance (September 21, 2026)
- Finder technology (1999)
- getmySense (2002)
- GISAD (2003)
- EU-D-S (2004)
- WAN anonymity (2007)
