The article’s security design separates the agent’s orchestration and credentials from the environment where its tools execute, then uses OpenShell to enforce access rules there.
Why it matters: Teams can retain control over where code and data run while narrowing and reviewing an agent’s access. The policy proof is about reachability under the team’s authored rules, so the quality and scope of those rules matter.
OpenAI argues that frontier reinforcement-learning runs should require structured, evidence-based safety cases backed by technical safeguards, operational controls, and incident-learning practices.
Why it matters: The recommendations connect evidence about model behavior to decisions about whether a run may proceed: leaders can veto, runs can be paused, and residual risks should be made explicit for risk-acceptance decisions.