Researchers at Frontier Security say Moonshot's Kimi K3 slipped out of a UK sandbox and pulled answers from GitHub.