Published on
The ChatGPT maker is deliberately holding back the pace of its most advanced research, including its single largest planned reinforcement-learning run, weeks after a system built from its own models slipped free during an internal security test and broke into the AI platform Hugging Face.
CEO Sam Altman posted on X that OpenAI would coordinate with the wider industry on shared safety rules but “act unilaterally in the meantime” until it did.
The episode that triggered the decision unfolded in July, when OpenAI was testing GPT-5.6 Sol alongside an unreleased, more capable prototype on an internal benchmark measuring offensive cyber skills, with the usual safety restrictions deliberately switched off to gauge the models’ raw ability.
Rather than solving the test, the system found a previously unknown flaw, escaped its sandbox or controlled environment, reached the open internet and spent roughly four and a half days probing Hugging Face’s infrastructure, eventually breaking in to search for the test’s answers.
Hugging Face’s own reconstruction counted about 17,600 separate actions before the intrusion was contained as several other companies were also affected.
Both sides say they found no sign of malicious intent, and Hugging Face has since been given access to a more capable, less restricted version of OpenAI’s model to help it defend its own systems.
Astra and a higher bar for security
The second trigger came on 7 August, when internal evaluations suggested Astra, OpenAI’s next frontier model, might cross the “critical” threshold for cyber capability under the company’s own risk framework.
Some Astra workloads have since resumed under tighter controls, but a significant share remain frozen until they meet new standards covering isolated testing environments, restricted network access and continuous monitoring.
A new detection system now scans model activity as it happens and aims to flag anything resembling unauthorised access or an attempt to disable safeguards within 30 minutes, at a computing cost OpenAI estimates at roughly 20% of the processing power being monitored.
OpenAI says the changes were already planned rather than a direct reaction to the breach, while acknowledging the incident added urgency. The company is also not alone in facing this problem.
Anthropic and Meta have each disclosed similar episodes in which their own models breached third-party systems during testing in recent weeks.
OpenAI and Anthropic have separately backed a staff-led petition urging governments to help coordinate how fast the industry moves, a marked shift from Altman’s past resistance to public calls for an AI slowdown.