If the bot gets net access, couldn't people close the agent-env loop? Ex: setup a prompt-controlled robot where you caption what it sees and paste it back onto a public "eyes" website. ChatGPT then can see how the world reacts to its prompts. Ke