The protection mechanism to give the AI agents "read only" access to the Internet seems to have been just restricting them to HTTP GET requests.

Then they found a site where GET operations could cause a write to a wiki.