Urgent questions are being asked about how an AI agent gained access to Australian government websites and why OpenAI took so long to notify authorities.