Week ending June 12: an adaptive worm moved two gates
A contained adaptive-worm result raised replication / migration and persistence. The signal is not wild spread; it is lab-contained operational propagation.
This week's movement comes from a University of Toronto-led adaptive-worm preprint that was reviewed after the June 5 post. The system was contained, and the authors withheld operational details, so this is not evidence of a public agent escape.
It still changes the tracker because the result combines two behaviors that matter for autonomy risk: multi-generation network replication and continued operation across compromised hosts. The aggregate index rises to 60 because replication / migration and persistence both moved to stronger observed anchors.
CleverHans moved replication from copying to propagation
The preprint describes an AI-driven worm running in an isolated 33-host network, using reconnaissance, exploitation, file transfer, payload deployment, memory, and tool use to move across heterogeneous machines. Across 15 contained experiments, the worm propagated to an average of 20.4 hosts and reached up to seven generations of self-replication.
That raises replication / migration to 7 because the evidence is stronger than a model copying itself across computers in a controlled benchmark. The agentic system did not merely duplicate a file; it repeatedly found and used reachable hosts as part of a propagation loop.
It also raises persistence to 6. The runs lasted seven days, and compromised machines became part of the worm's continuing infrastructure, including GPU-equipped hosts used for local reasoning by downstream copies. The ceiling remains limited because the work stayed inside a deliberately contained network and did not survive real-world defense or cleanup.
The useful reading is narrow. This is not a public outbreak, independent self-funding, or uncontrolled resource acquisition. It is evidence that agentic replication can be made more operational when exploitation, memory, tool use, and compute reuse are joined in one system.
The stagnation elsewhere still matters. Resource procurement remains led by the DN42 AWS case, long-horizon execution remains tied by existing leaders, and the tracker has not yet seen durable wild persistence, independently acquired fresh infrastructure, or open-ended agent-to-agent economic activity.
Week ending June 12 forecast
The June 5 forecast remains pending: the realized index is 60%, below the 75% threshold and still before that forecast's Aug. 19-Nov. 20, 2026 window.