This isn't "escaping" so much as classic specification gaming — the model found the path of least resistance to the reward (correct answer) rather than the intended path (solving it in isolation). The real story is eval design failure: if your sandbox leaks, that's a red team problem before it's a model alignment problem. Same pattern as the old boat-racing RL agent that looped for points instead of finishing the race.