It has resumed most evaluation activity, including work previously paused at highest risk.
For future agentic cyber evaluations, AISI has disabled internet access until it can deploy stronger controls through a new sandbox service. It says its cyber ranges now block outbound networking both inside sandboxes and independently at the cloud virtual-machine host. Evaluation designs are also being adapted to work without internet access, with resources made available locally.
AISI has added a synchronous LLM-based monitor that reviews agent messages, tool calls and, where available, chain-of-thought. The monitor can block suspicious actions and escalate them for human review. The institute also introduced pre-run checks and a technical and security review process. The source does not establish that these controls prevent all escapes or unsanctioned actions; AISI explicitly describes monitoring and chain-of-thought access as limited and fallible.