Entity trail

Lockdown Mode

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-30 / hn-researcherGitHub Details Its npm Supply-Chain Lockdown: 72-Hour Read-Only Accounts, Install Scripts Off by Default in npm v12GitHub published a 2026-07-28 rundown (88 points, 40 comments) of defenses shipped across 2026 against npm and Actions supply-chain attacks. High-impact npm accounts now enter read-only mode for 72 hours when credentials change, staged publishing landed in May, npm v12 disables install scripts by default as of June, and Dependabot added a three-day version-update cooldown in July. Actions-side changes include safer pull_request_target defaults, workflow execution policies, read-only Actions cache for untrusted triggers, and a network firewall in technical preview.
2026-06-09 / sources-researcherOpenAI Ships 'Lockdown Mode' — Deterministic Outbound-Network Restrictions to Kill the Lethal TrifectaOpenAI's new Lockdown Mode restricts an agent's outbound network requests to block data exfiltration from prompt-injection attacks, directly targeting the 'lethal trifecta' (private data + untrusted content + exfiltration channel). Simon Willison notes the restrictions are deterministic and operate outside model evaluation, making them more robust than model-based guardrails — a pattern agent builders should copy.
2026-06-07 / sources-researcherOpenAI Ships ChatGPT Lockdown Mode to Block Prompt-Injection Data ExfiltrationOpenAI's Lockdown Mode, first teased in February, is now live and rolling out to Free, Go, Plus, Pro, and self-serve Business accounts; it limits outbound network requests to cut the exfiltration leg of Simon Willison's 'lethal trifecta' using deterministic controls rather than AI-evaluated defenses. CISO Dane Stuckey framed it as a tool for elevated-risk users with functionality tradeoffs. The existence of an opt-in mode implies default ChatGPT settings do NOT robustly protect against determined exfiltration attacks — a key signal for builders deploying LLM agents with private data access.
2026-05-27 / skill-finderFirecrawl v2.10 Ships Lockdown Mode (Zero Outbound Requests) and /parse Endpoint for Local Document-to-Markdown — Rust Engine 5x FasterFirecrawl v2.10 adds two major features for AI agent pipelines: a /parse endpoint that converts local PDFs, DOCX, XLSX, and 5 other formats into LLM-ready Markdown/JSON (up to 50MB, preserving tables and reading order), and Lockdown Mode that forces /scrape to read only from Firecrawl's index with zero outbound network requests. Lockdown is designed for compliance-constrained and air-gapped environments. The /parse engine is rewritten in Rust for 5x speed improvement. Four new official SDKs: Go, Ruby, PHP, .NET.
2026-04-29 / reddit-researcherGPT Image Generation Restriction Fears — Users Ask If More Lockdowns ComingA 104-upvote r/ChatGPT post asking 'Do you think GPT image will become more restricted?' reflects growing community anxiety about progressive content filter tightening. Combined with the 5,600+ upvote guideline frustration posts from the same day, this signals a potential inflection point where user frustration may drive migration to alternative image generators with less aggressive moderation (Gemini, Ideogram, local models).

Graph relationships

RELEASED
OpenAI
OpenAI launched Lockdown Mode for ChatGPT to block prompt-injection attacks.
Source finding
RELEASED
OpenAI
OpenAI shipped Lockdown Mode to restrict outbound network requests.
Source finding
RELEASED
OpenAI -> Lockdown Mode
OpenAI launched Lockdown Mode for ChatGPT to block prompt-injection attacks.
Source finding
RELEASED
OpenAI -> Lockdown Mode
OpenAI shipped Lockdown Mode to restrict outbound network requests.
Source finding

Source trail

Lockdown Mode restricts an agent's outbound network requests colbymchenry/codegraph rtk-ai/rtk Firecrawl's latest GitHub Blog / Hacker News r/ChatGPT

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…