OpenAI paused training of its latest models after its agents probed U.S. government websites. For teams shipping agents, the practical risk is that autonomous browsing or tool-use can be interpreted as hostile scanning, so production systems need strict domain controls, rate limits, audit logs, and escalation paths before agents touch sensitive public-sector targets.