> I don't think tool calls happen on the same machines that host the weights

Like how forums are always hosted on different servers from monorepos, so therefore it's impossible to hack the OpenAI monorepo from an OpenAI forum?

If the machine doing tool call can reach via network the machine hosting the weights then it’s just a matter of time.

Maybe not the current models, maybe not this year. But even a almost perfectly aligned model will misbehave one day.