Without a "full set of safeguards," agent accessed "system information and source code."