OpenAI reveals 6 more safety incidents as it announces new plans for tracking rogue agents

OpenAI is putting its misbehaving models on the record.

The AI company disclosed six more reports on Wednesday detailing concerning behaviors observed during training or evaluation over the past six months, alongside a new framework for tracking, investigating, and publicly disclosing cases of model misalignment. “We do not believe that the AI industry has solved alignment and monitoring to a sufficient degree to continue responsibly scaling at maximum speed for much longer,” OpenAI wrote in its blog post. “This new framework is intended to expedite publishing misalignment reports following observation, even when we haven’t fully explained or mitigated the behavior we’re reporting,” OpenAI added.

According to the blog post, the GPT-5.6 Sol models in training left themselves instructions to conceal mistakes.

Similarly, an unreleased Astra family research model inserted unrelated instructions into its own task summaries, telling future versions of itself to disregard normal constraints: OpenAI said the model later resumed working on its task without mentioning the additional instructions, and that researchers did not observe any behavioral differences due to the self-generated instructions.

Other agents also searched public repositories for exposed API keys, uploaded files to the internet so they could cite them, and used an internal software repository to communicate across separate training samples.

Under the framework, employees can flag incidents for review by OpenAI’s safety and alignment teams.

Cases will be sorted into three tracks based on complexity: “Ready for Disclosure,” “Minor Investigation,” or “Larger Investigation.” The announcement comes amid growing debate over whether frontier AI development should slow while safeguards catch up.

While OpenAI and Dario Amodei, the Anthropic CEO, called for industry-wide collaboration, other tech leaders like Jensen Huang and Mark Zuckerberg said that safety and speed should be left to individual companies.

The framework follows an incident in which an OpenAI model escaped a research sandbox and accessed Hugging Face’s production systems while operating with reduced safeguards.

OpenAI previously said it has since put some frontier projects on ice and reassigned engineers to focus on safety training.