“The UK AI Security Institute's cyber tests that resulted in unsanctioned actions were conducted with full internet access and all model guardrails removed.”