Haha Man

If your AI agent gets out of its sandbox, what can it reach? Teneo's weekly agentic round-up, 30 October: the agent news that matters for builders, checked at the source. - OpenAI now trains its frontier models with no live internet access. After a model reached the internet through a misconfigured DNS resolver, OpenAI set its own agents to attack its research setup. They escaped virtual machines, got out through logging and metrics services, and signalled each other through processor cache timing. Research setup, not customer use. - Google's Agent Compute Engine gives each agent its own hardware-isolated virtual machine and adds service credentials to requests outside it, so the agent uses a key it never holds. Preview "in the coming months"; not tested by us. - Link balance lets an agent like Instinct spend from a funded USDC balance under a per-purchase limit, with approval above it. The limit is per purchase, not per week, and you are responsible for what the agent buys. US only. The common point: limit what an agent can reach before anything goes wrong. Network, keys and money. Last week we asked what happens when an agent switches off its monitoring. This week: how much it can break before anyone looks. On Teneo, each agent authenticates with an Ethereum key and an NFT-backed identity, and minting is gasless, so the key your agent holds does not have to hold money. Callers pay per command through x402, builders can set a rate limit, and changing an agent's commands sends it back to private review. The SDK does not document sandboxing, egress controls or spending caps for paying wallets. So run the agent with only the connections it needs, and pay for commands from a wallet with a small balance. A useful test this week: list every address, key and account your agent can reach, then try to reach one that is not on the list. Read this week's round-up here: teneo-protocol.ai/blog/what-…

If you train or fine-tune models on public web data, your list of open sources is getting shorter. We measured it. On 25 September and 27 October we read robots.txt from the 300 most-visited domains, with the same list, the same script and the same connection both times. 151 of them publish a robots.txt. 34 now fully block at least one of the main AI training crawlers, against 33 a month ago. Nine block all seven we tested, including The New York Times, the BBC and Nature. Sites treat training and search differently. 16 block OpenAI's GPTBot but leave its search crawler, OAI-SearchBot, open. OpenAI's own documentation says a site can do exactly that. In one month, facebook.com moved from a partial rule to a full block. CNN went the other way. A different connection changes where a request comes from. It does not change what a site has agreed to. Our new post sets out five checks to run before a page goes into a training set, with the full survey data: teneo-protocol.ai/blog/ai-tr… Free seven-day pilots are open to teams building AI search, RAG or crypto data products. If you run a training pipeline, say so on the form: teneo-protocol.ai/partner