There has to be a route to where the LLM is running, and if there's a route for that there's probably a way for the machine to use it to route traffic somewhere else.
There doesn't have to be. You can easily block all outbound traffic, or the VM can exist without any network interface at all - you can control it through its host using a serial console.
So just enable access to a completely offline, cached, and transparently proxied, copy of the internet.
Isn't that essentially what they trained with, anyway?
I think that was the plan. But OpenAI hacked the proxy
There has to be a route to where the LLM is running, and if there's a route for that there's probably a way for the machine to use it to route traffic somewhere else.
No, just allow the firewall to access the LLM endpoint, nothing else. And protect the firewall settings from the agent.
There doesn't have to be. You can easily block all outbound traffic, or the VM can exist without any network interface at all - you can control it through its host using a serial console.