To keep the AI hacking genie bottled up, try one-way networks

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job