Google built an agent harness for Chrome bug hunting and found a 13-year-old sandbox escape validating the detection capabilities.