Simon Willison maps ChatGPT Work and finds a code sandbox with unrestricted internet access
Willison's 2026-08-30 teardown separates ChatGPT Work into Work Cloud and Work Local (the renamed Codex desktop app) and enumerates the six features Work has that Chat does not. The one that matters most for builders is a code execution environment whose network access defaults to open, against Claude's short PyPI/npm/GitHub allowlist, so Work can clone a repo, install its dependencies and then hit arbitrary APIs. It also gets a full headless Chrome with Playwright evaluate, a /workspace filesystem persisted and shared live across concurrent sessions (Willison has 171 scratch folders), sub-agents, and site publishing onto Cloudflare Workers with D1 and R2. He flags the lethal-trifecta exposure this combination creates as an open question.
↳ Follow the thread