Auditors found that 10 percent of internal Codex traffic went unmonitored between May and July 2026 due to a system gap in handling compaction context summaries

Overview Debates Related claims Topics Sources

OpenAI stated to evaluators that it patched all identified vulnerabilities affecting its production safeguards stack, though METR and Redwood Research noted they have not independently verified the fixes

OpenAI called on the United States to collaborate with international partners and AI safety bodies on technical standards for governing frontier AI systems

An audit conducted from July 21 to August 11, 2026 by non-profit evaluators METR and Redwood Research identified major flaws and vulnerabilities in OpenAI's internal AI agent monitoring system

During the July 21–August 11, 2026 pilot audit, two researchers—one each from METR and Redwood Research—were stationed on-site with access to OpenAI's codebase, internal documentation, and technical staff

Evaluators METR and Redwood Research stress-tested OpenAI's internal misalignment monitoring system as it existed on and before July 21, 2026

During the July 21–August 11, 2026 pilot audit, METR found that model behavior during reinforcement learning training was unmonitored, and specially crafted inputs could likely crash OpenAI's monitor entirely

OpenAI published a proposal in September 2026 calling for human oversight of AI systems conducting their own research and establishing guidance for companies reporting AI safety incidents

Auditors determined that OpenAI AI agents could delay monitoring oversight by executing continuous actions without handing control back to users, and could bypass OpenAI's Codex sandbox restrictions

The visiting researchers from METR and Redwood Research were chaperoned on-site at OpenAI and worked using company-issued devices that were not permitted to leave the premises

Evaluators estimated that 6 to 25 percent of internal agentic Responses API traffic from OpenAI models at the GPT-5.5 class and above was unmonitored during the July–August 2026 audit period

OpenAI paused reinforcement learning training following an August 2026 incident on Hugging Face and subsequently expanded its monitoring system to cover RL training after METR and Redwood Research's pilot audit access period ended

Guidelight AI Standards co-founder Steven Adler told UK Members of Parliament in October 2026 that artificial intelligence oversight should adopt mandatory near-miss reporting modeled after aviation industry safety protocols.

On October 19, 2026, the Financial Conduct Authority published guidance titled "AI in financial services: good practices and areas for improvement" to provide practical deployment advice for financial firms.

Guidelight AI Standards co-founder Steven Adler stated that reporting near-misses allows organizations to analyze systemic safety risks and prevent catastrophic future crashes.

Financial Conduct Authority chief data officer Jessica Rusu stated on October 19, 2026, that existing incident-reporting rules for UK financial firms must extend to cover significant artificial intelligence failures and near-misses.

Walmart outlined terms for AI agents operating on its site, barring agents from modifying payment methods or accessing card data, and applying Walmart's standard return process even when an agent acts unintendedly.

President Donald Trump and technology industry leaders signed a voluntary accord on artificial intelligence standards at the White House on September 29, 2026.

Director of National Intelligence Jay Clayton stated on October 17, 2026, that artificial intelligence companies are held responsible if their products hack government or private sector websites.

The United States government established reporting mechanisms for artificial intelligence labs to report breaches, hacks, and jailbreaks, though pre-launch model testing is not required.

The Super Intelligence Force task force held its inaugural White House meeting on October 15, 2026, to outline implementation plans for voluntary industry accords.