Hugging Face says it contained a production breach tied to limited internal data and service credentials, raising a sharper question: what happens when autonomous agents enter the kill chain?