ChatGPT Work Is Two Products. That's the Signal
Simon Willison spent the weekend reverse-engineering OpenAI's most confusing product and published the map on August 30. The headline isn't "ChatGPT Work exists." It's what Work actually is: two products, and one of them is a quietly complete agent platform.
Work Local is the desktop app that used to be Codex — files and local execution, reskinned to be less intimidating to non-developers. Work Cloud, the interesting one, is a $20/month cloud agent with the full harness:
- code execution with internet access — open to all domains by default, where Chat's sandbox stays blocked
- a full headless Chrome browser: fill forms, run JavaScript against the DOM, and hand password/2FA entry to the human so credentials never round-trip through the model
- a persistent filesystem shared across sessions — Willison already has 171 scratch folders
- parallel sub-agents: Sol, Luna, and Terra, OpenAI's work-model family
- one-prompt site deploys on Cloudflare Workers
- scheduled automations: "check for a Waymo Half Moon Bay launch every day at 8am"
That's an agent operating system, shipped as a tab next to Chat.
Here's the dot it connects: OpenClaw 2.0 landed the same weekend — the open-source version of the same ergonomics. Browser app, shared cloud sessions, agents that grow into multiplayer workspaces. Two stacks, one trajectory: the race stopped being about model IQ and became about the harness — files, browser, memory, scheduling.
The open question is safety. Willison's "lethal trifecta" — private data, exposure to untrusted content, a way to exfiltrate — is present in full. Work combines all three, and OpenAI still hides its system prompts and tool descriptions. He found 223 tools by asking a Work agent to document its own system: the most damning review of the docs, and the best demo of the product.
Verdict: the most powerful agent product on the market is also the least documented one. Watch what OpenAI says about prompt injection in Work — and watch OpenClaw's 933 contributors for their answer to the same question.