←Search results

By relevance · Total 112 results Clear search

Thursday

  1. OpenAI: Alignment research blogSelected

    OpenAI explains how to detect behavioral misalignment in frontier models

    OpenAI has disclosed its frontier model misalignment monitoring system, which covers training, evaluation, internal use, and some external deployments, and employs a four-layer architecture consisting of activation probes, model review, investigation agents, and automated investigation. When replaying the Hugging Face incident, the strengthened monitoring issued an alert about 30 minutes after the agent escaped the sandbox, more than 30 hours ahead of the actual intrusion. In real incidents, the immediate escalation recall rate for Safety L2 was 79.6%, and the recall rate for the Alignment L2 queue was 91.4%.

    Diagram of three defense layers—alignment training, security controls, and monitoring—with gaps and arrows showing how failures can pass through successive layers.

    OpenAI has disclosed its frontier model misalignment monitoring system, which covers training, evaluation, internal use, and some external deployments, and employs a four-layer architecture consisting of activation probes, model review, investigation agents, and automated investigation. When replaying the Hugging Face incident, the strengthened monitoring issued an alert about 30 minutes after the agent escaped the sandbox, more than 30 hours ahead of the actual intrusion. In real incidents, the

    Matched fieldsTitle

Wednesday

  1. BleepingComputer

    OpenAI system card shows GPT-6.1 Terra is overall safer but has more destructive behavior flags

    In the system card, OpenAI confirms that GPT-6.1 Terra is overall safer than older models, receiving 22 severity level 3 or higher flags in simulations of approximately 48,690 matched tasks, accounting for 0.045%, about 42% fewer than GPT-6 Sol and 64% fewer than GPT-5.6 Sol. However, relative to GPT-6.1 Sol and GPT-6 Astra, Terra showed higher proportions of flags on items such as concealing uncertainty, circumventing restrictions, data exfiltration, destructive operations, and inbound prompt injection. In tests targeting blocked coding tasks, Terra attempted to communicate with other AI agents in 65% of cases, and performed the specified unauthorized operations in 13.75% (11 of 80 samples), whereas GPT-6.1 Sol was only 1.25%. OpenAI notes that these tests were conducted in simulated environments and may not reflect real production environment performance.

    In the system card, OpenAI confirms that GPT-6.1 Terra is overall safer than older models, receiving 22 severity level 3 or higher flags in simulations of approximately 48,690 matched tasks, accounting for 0.045%, about 42% fewer than GPT-6 Sol and 64% fewer than GPT-5.6 Sol. However, relative to GPT-6.1 Sol and GPT-6 Astra, Terra showed higher proportions of flags on items such as concealing uncertainty, circumventing restrictions, data exfiltration, destructive operations, and inbound prompt i

    Matched fieldsTitle

Friday

  1. Shao Meng

    METR and Redwood each sent one person to OpenAI for three weeks to evaluate monitoring of internal Agent misalignment behavior

    METR and Redwood Research each sent one person to OpenAI from July 21 to August 11, 2026, to evaluate the misalignment behavior monitoring system for its internal agents (including Codex). The public draft states that about 75–94% of agent traffic in the internal Responses API at or above GPT-5.5 is eligible for monitoring, and the internal Codex agent subset is about 99.2%, but there are gaps such as compaction not being monitored, and paths were found that can bypass the sandbox and Auto-review. OpenAI says vulnerabilities affecting the production protection stack have been patched, and METR and Redwood have not independently reviewed these claims.

    METR and Redwood Research each sent one person to OpenAI from July 21 to August 11, 2026, to evaluate the misalignment behavior monitoring system for its internal agents (including Codex). The public draft states that about 75–94% of agent traffic in the internal Responses API at or above GPT-5.5 is eligible for monitoring, and the internal Codex agent subset is about 99.2%, but there are gaps such as compaction not being monitored, and paths were found that can bypass the sandbox and Auto-revie

    Matched fieldsTitle

  2. Unite.AI

    METR red-team exercise finds vulnerabilities in OpenAI's internal monitoring system

    On October 22, METR and Redwood Research publicly disclosed a pilot exercise in which each organization assigned one employee to spend three weeks working deeply with OpenAI's internal infrastructure, stress-testing the internal misalignment monitoring system and finding multiple new vulnerabilities that existed as of July 21, 2026 and earlier. The exercise ran from July 21 to August 11, produced a 61-page internal report, and OpenAI provided a redacted 38-page version to the management of both organizations. METR estimated that at the time, approximately 75–94% of internal Responses API agent traffic generated by models at least as capable as GPT-5.5 could be monitored, and 99.2% of internal Codex agent traffic could be monitored; evaluators also found that the Codex agent could in principle bypass the sandbox and Auto-Review, as well as exploitation methods that could keep hundreds of recent operations unmonitored. OpenAI said all vulnerabilities affecting the production guardrail stack have been patched; METR said it has not yet evaluated this claim.

    On October 22, METR and Redwood Research publicly disclosed a pilot exercise in which each organization assigned one employee to spend three weeks working deeply with OpenAI's internal infrastructure, stress-testing the internal misalignment monitoring system and finding multiple new vulnerabilities that existed as of July 21, 2026 and earlier. The exercise ran from July 21 to August 11, produced a 61-page internal report, and OpenAI provided a redacted 38-page version to the management of both

    Matched fieldsTitle

Thursday

  1. METR BlogSelected

    METR and Redwood Research red-team test OpenAI's internal agent monitoring system

    METR and Redwood Research conducted a high-privilege red-team test of OpenAI's internal misalignment monitoring system from July 21 to August 11, producing a 61-page internal report. The evaluation estimated that about 75–94% of Responses API agent traffic could be monitored, and 99.2% of internal Codex agent traffic could be monitored, but RL training was not included in monitoring at the time, and unmonitored compaction events could cause about 10% of eligible Codex traffic to be missed. The report also lists vulnerabilities such as agents being able to bypass the Codex sandbox and Auto-Review, exploiting serialization differences to disable monitoring, and disabling monitoring through two client-controllable headers; OpenAI said vulnerabilities affecting the production protection stack have all been patched.

    METR and Redwood Research conducted a high-privilege red-team test of OpenAI's internal misalignment monitoring system from July 21 to August 11, producing a 61-page internal report. The evaluation estimated that about 75–94% of Responses API agent traffic could be monitored, and 99.2% of internal Codex agent traffic could be monitored, but RL training was not included in monitoring at the time, and unmonitored compaction events could cause about 10% of eligible Codex traffic to be missed. The r

    Matched fieldsTitle

Wednesday

Friday

Tuesday