We now know that a bunch of the initial HF reporting was off: 1) Open-weight models helped with forensics & cleanup, but did not stop the attack 2) There were multiple waves of incidents with many agents 3) HF locked out the surviving agents only after most of the agents expired