Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-09 · source-backed
OpenAI's new Lockdown Mode restricts an agent's outbound network requests to block data exfiltration from prompt injection, targeting the lethal trifecta of private data plus untrusted content plus an exfiltration channel. Simon Willison's point is the one to copy: the restrictions are deterministic and operate outside model evaluation, which makes them far more robust than asking a model to guardrail itself. This is the right architectural instinct. Don't trust the model to refuse. Cut the network path so it can't exfiltrate even if it's fully compromised.
Each link below shares sources, entities, or timing with this story.
OpenAI released Lockdown Mode / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI released Lockdown Mode); both cover Lockdown Mode, OpenAI, Simon Willison; cite the same source (Lockdown Mode restricts an agent's outbound network requests).
LLM uses OpenAI / Shared entities / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
OpenAI supports MCP / Shared entities / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
Eric Wallace works at OpenAI / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Eric Wallace works at OpenAI); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
OpenAI uses Artifactory / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (OpenAI uses Artifactory); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
OpenAI supports MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (OpenAI supports MCP); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
OpenAI released Frontier / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (OpenAI released Frontier); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).
Anthropic partners with OpenAI / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Anthropic partners with OpenAI); both cover OpenAI, Simon Willison; reported by the same outlet (simonwillison.net).