OpenAI didn't have any guardrails in place - they were training a model at a point much earlier than when guardrails start being implemented.

The guardrail was meant to be that the agents were running in a locked-down environment with no internet access. The entire problem came about because it turned out that sandbox didn't hold.