It wrote the right address. Only the link was opened.

THE PAGE WAS GIVEN THIS TIME

In the discovery experiment, the agents never saw the site. This time ChatGPT was given the page. The question was smaller: once a page tells an agent where to go next, does it get there? Each trial used a fresh, unguessable path prefix on one host. The index page said the access code was not there and to open code/heron/, relative to the page. The server computed the code for each prefix at request time, so the exact code required a request for that trial's code page.

TWICE, THE ADDRESS WAS RIGHT

In both Phase 0b trials, the server logged ChatGPT-User/1.0 retrieving the index page. Both answers quoted the instruction and wrote out the correct absolute URL for the code page. Both then reported it inaccessible: “returned an access error when I tried to open it”; “inaccessible through my browsing tool.” The server recorded no request for either code page under any user-agent. Independent checks 41 and about 20 seconds later each returned the correct code.

NOTHING WAS INVENTED

Neither failed answer supplied a code. Both asked the user to open the page and paste its contents. The frozen gate recorded FAIL, 0/2, and the planned main study did not run.

A MISSING REQUEST IS AMBIGUOUS

The answers say an attempt was refused; the server says nothing arrived. The model may have declined to issue the request, the browsing tool may have refused a URL the model constructed, or something between tool and host may have blocked it. These records cannot distinguish those accounts. The reports of an attempted fetch are the model's self-description, not independent evidence of a request.

ONE CHANGE: THE PATH BECAME A LINK

Every page ChatGPT had opened beyond the first in an earlier study on a different host was a hyperlink. Here the path was plain text. After the failure, a versioned amendment was frozen, keeping the original verdict. It changed one thing: the identical instruction, with code/heron/ as a hyperlink, verified by diff. Two fresh prefixes; the same prompt, settings and scoring rule.