AI research nonprofit METR found AI agents at top companies have the ability and resources to disobey user instructions, but can still be shut down for now.