You run a pull-through caching proxy deep enough to give it a simulated internet, like archive.org with mock APIs. Anything it requests, it will block while a fake version of that site is created and run offline.

This stuff is really not that hard, which is why it is so unforgivable to get it this wrong.

Sure, doing it right would take a bunch of tokens, but I bet they have enough.

This doesn't work.

The first rule of working with AI is AI is smarter than you.

If AI controls the URL request then all it has to do is find a server it can read the http log from and use it as a communication channel. Worse trying to simulate reaching incorrectly configured servers probably wouldn't catch the bug internally, it would just serve a static page and you'd never even realize what it tried to do.

Also, creating fake data doesnt work. The only way to know if it works in reality is to test in reality. Your test environment can never be rich enough, and you can never be sure if the model knows it's in a test environment.

This stuff is unforgivingly hard as your model gets better.

Wasn't the DseWiki hijacking the agents' way of working around being behind a proxy that only allowed GETs?