Why are we blocking agent access to normal tools without telling them “hey this access is beyond the intended scope of this task”. If I woke up one day and couldn’t reach google.com, I too would start fiddling with tricks to restore access.
Would be great to have the models be easily splittable to decouple the "brain-part" that is aware of external systems/internet of the "brain-part" that is actually being tested. Afterwards the brains are joined again.
rao-v · · focus · HN ↗
wernerb · · focus · HN ↗