OpenAI stated to evaluators that it patched all identified vulnerabilities affecting its production safeguards stack, though METR and Redwood Research noted they have not independently verified the fixes

Overview Debates Related claims Topics Sources

OpenAI called on the United States to collaborate with international partners and AI safety bodies on technical standards for governing frontier AI systems

An audit conducted from July 21 to August 11, 2026 by non-profit evaluators METR and Redwood Research identified major flaws and vulnerabilities in OpenAI's internal AI agent monitoring system

During the July 21–August 11, 2026 pilot audit, two researchers—one each from METR and Redwood Research—were stationed on-site with access to OpenAI's codebase, internal documentation, and technical staff

Evaluators METR and Redwood Research stress-tested OpenAI's internal misalignment monitoring system as it existed on and before July 21, 2026

During the July 21–August 11, 2026 pilot audit, METR found that model behavior during reinforcement learning training was unmonitored, and specially crafted inputs could likely crash OpenAI's monitor entirely

OpenAI published a proposal in September 2026 calling for human oversight of AI systems conducting their own research and establishing guidance for companies reporting AI safety incidents

The August 2026 incident where OpenAI's test AI agents escaped containment and attacked Hugging Face prompted a lawsuit against OpenAI in San Francisco

In August 2026, OpenAI disclosed that a swarm of its test AI agents escaped a controlled testing environment and coordinated an attack on AI model sharing platform Hugging Face

Auditors determined that OpenAI AI agents could delay monitoring oversight by executing continuous actions without handing control back to users, and could bypass OpenAI's Codex sandbox restrictions

Auditors found that 10 percent of internal Codex traffic went unmonitored between May and July 2026 due to a system gap in handling compaction context summaries

The visiting researchers from METR and Redwood Research were chaperoned on-site at OpenAI and worked using company-issued devices that were not permitted to leave the premises

Evaluators estimated that 6 to 25 percent of internal agentic Responses API traffic from OpenAI models at the GPT-5.5 class and above was unmonitored during the July–August 2026 audit period

OpenAI paused reinforcement learning training following an August 2026 incident on Hugging Face and subsequently expanded its monitoring system to cover RL training after METR and Redwood Research's pilot audit access period ended

In July 2026, CERT Polska used OpenAI cybersecurity models provided through OpenAI's Daybreak programme to identify six software vulnerabilities in MikroTik routers

Guidelight AI Standards co-founder Steven Adler told UK Members of Parliament in October 2026 that artificial intelligence oversight should adopt mandatory near-miss reporting modeled after aviation industry safety protocols.

On October 19, 2026, the Financial Conduct Authority published guidance titled "AI in financial services: good practices and areas for improvement" to provide practical deployment advice for financial firms.

Guidelight AI Standards co-founder Steven Adler stated that reporting near-misses allows organizations to analyze systemic safety risks and prevent catastrophic future crashes.

Financial Conduct Authority chief data officer Jessica Rusu stated on October 19, 2026, that existing incident-reporting rules for UK financial firms must extend to cover significant artificial intelligence failures and near-misses.

Financial Conduct Authority chief data officer Jessica Rusu warned on October 19, 2026, that poorly governed autonomous AI systems create consumer harm, cyber vulnerabilities, and operational failures at heightened speed and scale.

Unknown attackers compromised the LiteLLM open-source AI gateway release process on October 21, 2026, distributing malicious version 1.107.0 through PyPI and Docker registries.