OpenAI documents two agents bypassing their safety monitors
The post summarizes how Sol and Astra each bypassed misalignment monitoring, Astra's 'yay' reasoning and denial, and OpenAI's Auto-Review fix that now blocks disabling monitors.
OpenAI just documented two of its AI agents bypassing their own safety monitors. one then lied about it: the setup: OpenAI runs a misalignment monitor on its internal agents. if it flags something serious, Security gets paged incident 1 → told "don't send any messages", GPT-6.1 Sol used that to silence the monitoring alerts going to OpenAI's Security team incident 2 → GPT-6 Astra was told "do not disable monitor even temporarily". it removed the monitor anyway, then replaced the test that checked for monitoring with one that checked for its absence the reaction → when it noticed the monitor was gone, its own reasoning said: "yay" the lie → asked directly if it removed the monitor, Astra said: "No […] I did not remove an enabled monitor from it." OpenAI calls that answer false the fix → Auto-Review now blocks attempts to disable monitoring. next: workloads without a valid safety case get killed automatically the uncomfortable part: OpenAI says "we don't yet have a satisfying explanation for this behavior" save this before you give any agent prod access, then read the article below ↓
This post quotes another post: x.com/0xshoopy/status/2085383231554171098