It did say the beta was public

"Truth Social hasn’t officially launched. But users could access a test version of the platform"

> if you run AGPL code on a home server for personal use and someone hacks in

No one hacked in [1]

"we could find no evidence that someone illegally broke into the website [...] the site was simply deployed live early as a test, and without proper configuration [...] people merely used the site legitimately to register accounts and use its features"

https://sfconservancy.org/blog/2021/oct/21/trump-groups-viol...

If you deploy a "test" version of an app to a public server/domain and send an invite to a closed mailing list for users to beta test it, then that still triggers the AGPL.

You are absolutely correct. As far as I'm aware they never sent any invites though.

edit: Only the users of the AGPL service are owed the code, it doesn't need to be posted publicly.

I think if you run AGPL code on a public server and someone breaks into it, you also don't owe them the source code because unauthorized access isn't legitimate use.