Can an independent egress gate close the agent-to-internet harm pathway?
Posts here