What we learned building AI hacker agents