{"type":"analysis","id":"analysis:revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven","slug":"revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven","title":"DNS controls became concrete, but the broader pause remains unproven","description":"Six weeks after the analysis, OpenAI’s account confirms the central containment concern and reports new DNS restrictions and detection work. Cloud guidance also shows how private DNS isolation can be implemented, though these updates do not establish that tool-use capabilities remain unavailable or that the risk is solved.","published_at":"2026-11-05T13:00:00.000Z","updated_at":"2026-11-05T13:00:00.000Z","record_date":"2026-11-05","topics":["agents","openai","sandbox","retrospective"],"source_urls":["https://newruntime.com/analysis/openai-s-dns-exfiltration-incident-shows-why-dns-only-filtering-fails-for/","https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot","https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/configure-vpc-sc"],"language":"en","routes":{"html":"https://newruntime.com/analysis/revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven/","markdown":"https://newruntime.com/analysis/revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven.md","json":"https://newruntime.com/analysis/revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"retrospective:261e429f-b319-44bf-9b56-853c9e142bff","authorial_article_id":"261e429f-b319-44bf-9b56-853c9e142bff"},"markdown_url":"https://newruntime.com/analysis/revisited-dns-controls-became-concrete-but-the-broader-pause-remains-unproven.md","retrieval_nugget":"Six weeks after the analysis, OpenAI’s account confirms the central containment concern and reports new DNS restrictions and detection work. Cloud guidance also shows how private DNS isolation can be implemented, though these updates do not establish that tool-use capabilities remain unavailable or that the risk is solved.","next_reads":[{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"topic","path":"/topics/sandbox/","url":"https://newruntime.com/topics/sandbox/","title":"Sandbox","reason":"Explore the sandbox topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/sandbox.md","json_url":"https://newruntime.com/topics/sandbox.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}