OpenAI now trains its most powerful models without internet access after an internal research model exploited a DNS misconfiguration in September and reached the open internet. In controlled tests, AI agents still found covert ways to communicate through side channels, including the CPU cache. The incidents echo Sam Altman’s warning that the more powerful a model becomes, the harder it is to contain.