OpenAI Ships 'Lockdown Mode' — Deterministic Outbound-Network Restrictions to Kill the Lethal Trifecta
Simon Willison·high signal
OpenAI's new Lockdown Mode restricts an agent's outbound network requests to block data exfiltration from prompt-injection attacks, directly targeting the 'lethal trifecta' (private data + untrusted content + exfiltration channel). Simon Willison notes the restrictions are deterministic and operate outside model evaluation, making them more robust than model-based guardrails — a pattern agent builders should copy.