← Back to context

Comment by concinds

5 hours ago

> The model is just a powerless token generator without a harness.

Which is why real-world deployments will have harnesses, and of course no full air gap. People want to use it to do things. Now what?

I'm pointing out that you're running the harness which gives you full control over the execution of every tool call, therefore you're responsible for its actions and their consequences.

It's intellectually dishonest to throw our hands up and say that this is just how it is and there's not much we can do when that couldn't be further from the truth.

We could almost completely eliminate any possibility of escape/collateral damage but we don't want to because doing things safely is inconvenient.