[kccqzy]

This is what reasonable people disagree on. My employer provides several AI coding tools, none of which can communicate with the external internet. It completely removes the exfiltration risk. And people find these tools very useful.

[TeMPOraL]

Are you sure? Do they make use of e.g. internal documentation? Or CLI tools? Plenty of ways to have Internet access just one step removed. This would've been flagged by the trifecta thinking.

[kccqzy]

Yes. Internal documentation stored locally in Markdown format alongside code. CLI tools run in a sandbox, which restricts general internet access and also prevents direct production access.

[gizzlon]

Can it _never_ _ever_ create a script or a html file and get the user to open it?

[kccqzy]

That’s different. Now you are asking the user to do an action.

[TeMPOraL]

The user could also be another program, or another AI agent.