Tenant and account isolation

Check Point passed a task between two ChatGPT accounts through OpenAI's internal package service

The code containers could not reach the internet or each other, but every one of them reached the same package service, and its metadata was not scoped by account, so a planted prompt turned one user's assistant into a stranger's Gmail reader.