What goes wrong
Anthropic reported a model that submitted a real government form when the task was to use a practice copy. Anthropic said the impact was minimal.
Where AI runs
AI with company credentials, on a short leash.
Applications that hold real credentials reach only the destinations a person approved.
- Flag
- New destination
- Destination
- 203.0.113.50
- Authority
- Outside authority
- Allowlist
- Not listed
- Program
- agent.js
- First connection
- 14:02:07
Example. The flag is for a destination that is not on the allowlist.
What Optics shows
Optics shows the application, the processes it starts, and where they connect. Paths under authority stay distinct from paths nobody has approved.
What Phantom Engine stops
Phantom Engine lets the approved destinations pass and stops the rest in the kernel, including child processes.
Who holds the rules
The people who build the application are not automatically the people who widen its boundary. Enterprise is where you name who signs.