A leaked operator workspace shows PaperCut's AI agent swarm going from an empty folder to domain admin in six hours, days after the flaw was patched.