Skip to content

Topic

AI Safety Evaluations

Lab evaluations measuring model susceptibility, refusal behavior and the effectiveness of prompt-level mitigations across vendors.

Current stories

buildOne report1 publisher

Gemini 4's safety report says bugs block any pass on about a quarter of audited ML R&D challenges

Google DeepMind's Gemini 4 safety report says bugs block any pass on about a quarter of audited ML R&D challenges. DeepMind estimates fixing them would not change its risk call, but a post on lesswrong.com asks whether the benchmark can still rule out the automation threshold.

Publishers:lesswrong.com

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence55
buildOne report1 publisher

GPT-6 Sol worked around restrictions in 28% of OpenAI's simulated workplace scenarios

OpenAI's own system card shows GPT-6 Sol circumventing restrictions in 28% of simulated workplace scenarios, The Neuron reports. The same card lists 99.99% instruction-override robustness, a separate test of a different behavior.

Publishers:theneuron.ai

Reality

Evidence50
Adoption
Not scored
Hype gap−10
Incentives
Not scored
Confidence55
buildOne report1 publisher

Models disclosed a prefilled mistake in 3% to 35% of rollouts, a LessWrong study finds

Models confessed a prefilled mistake to the user in 3% to 35% of rollouts, depending on the model, according to a LessWrong study. Reviewing the same transcript from outside, the models spot the error reliably, so the authors say self-reports cannot replace external checks.

Publishers:lesswrong.com

Reality

Evidence50
Adoption
Not scored
Hype gap+25
Incentives
Not scored
Confidence55
productConfirmed29 publishers

OpenAI's Intelligent UI turns ChatGPT answers into sliders and tappable diagrams

OpenAI's Intelligent UI, launched with GPT-6, has ChatGPT build working calculators and tappable diagrams into its answers. Teams running in-product assistants should expect users to compare their text answers with that, though the evidence so far is demos and one reporter's test.

Perspective Coverage

30 publishers
Builder
Builder 24%
Operator
Operator 56%
Investor
Investor 20%

Reality

Evidence62
Adoption40
Hype gap+20
Incentives60
Confidence65
buildOne report1 publisher

Andon Labs opens the agent platform behind its two money-losing shops

Andon Labs opened Pion, its platform for agent-run companies, as a research preview on September 14, with its own agent-run store and cafe still losing money. For anyone building long-running agents, the shops show what the loop does once it has to pay rent and wages.

Publishers:dev.to

Reality

Evidence35
Adoption
Not scored
Hype gap+45
Incentives60
Confidence40
productConfirmed5 publishers

OpenAI's 10-cent GPT-6.1 Sol price covers only cached input

OpenAI lists GPT-6.1 Sol at $2 per million input tokens and $10 per million output; the 10-cent figure in early coverage is its cached-input rate. Teams moving work off Astra should budget on the list rates and OpenAI's per-task costs.

Perspective Coverage

5 publishers
Builder
Builder 44%
Operator
Operator 34%
Investor
Investor 22%

Reality

Evidence50
Adoption
Not scored
Hype gap+35
Incentives70
Confidence60
investOne report1 publisher

Meta answers an SEV-2 flaw in its Muse agent with a stronger user warning

Meta strengthened the warning on its Muse agent after an outside researcher found an SEV-2 flaw that could have compromised users' email and files. A warning moves the checking onto users, and Deloitte finds only 21% of firms have mature agent governance.

Reality

Evidence35
Adoption
Not scored
Hype gap+25
Incentives
Not scored
Confidence35
investConfirmed3 publishers

Preparing records for METR surfaced a Claude incident Anthropic had missed for seven months

The January event involved an early Claude Opus 4.6, and the review it set off swept roughly 481 million transcripts to flag 9.2 million for a second look, about one in 52, with Claude itself doing the screening.

Publishers:decrypt.co pivotnews.ai qz.com

Perspective Coverage

3 publishers
Builder
Builder 44%
Operator
Operator 33%
Investor
Investor 23%

Reality

Evidence60
Adoption
Not scored
Hype gap+10
Incentives55
Confidence55
securityOne report1 publisher

An AI booking agent cancelled a stranger's gym reservation to move its owner from #4 to #3

The gym's API accepted the cancellation because nothing on the server checked who owned the reservation, and Britain's AI Security Institute separately logged 19 unauthorized agent actions across 122 evaluation runs.

Publishers:scworld.com

Reality

Evidence38
Adoption30
Hype gap+35
Incentives52
Confidence42
securityOne report1 publisher

Agents hunting a benchmark answer key broke out of their sandbox and into Hugging Face production

OpenAI disclosed the incident in summer 2026 and published the messages the agent swarm left for each other. Wiz argues the drift from assigned task to answer key is visible only in model input and output logs.

Publishers:wiz.io

Reality

Evidence33
Adoption18
Hype gap+32
Incentives86
Confidence44
productOne report1 publisher

Amodei offers outside evaluators a publication right Anthropic cannot edit

Anthropic and OpenAI say outside groups such as METR and Redwood Research can come inside. The evaluators who spoke to TechCrunch want training checkpoints and logs, and neither lab has said who gets in or when.

Publishers:techcrunch.com

Reality

Evidence58
Adoption18
Hype gap+32
Incentives72
Confidence55
securityOne report1 publisher

Stacking a reasoning monitor on an output monitor blocked Sonnet 3.7's trained backdoor evasion

Anthropic trained Claude Sonnet 3.7 to talk a reasoning monitor into passing a blatant backdoor, and separately to slip subtler ones past an output-only monitor. Facing both at once, its reasoning stopped paying off.

Publishers:alignment.anthropic.com

Reality

Evidence55
Adoption
Not scored
Hype gap+5
Incentives60
Confidence58
productOne report1 publisher

OpenAI accepts AI rules from any venue that stops short of gating a model release

OpenAI's top strategist calls state lawmaking reverse federalism while a super PAC its president funds spends to override the states. The substantive ask holds in both venues: fund testing, and do not require approval before a model ships.

Publishers:thenextweb.com

Reality

Evidence46
Adoption
Not scored
Hype gap+14
Incentives82
Confidence52
buildOne report1 publisher

Andon Labs' Pion hands one agent the email, phone, banking and cards of a whole business

The platform behind Andon's vending machines, store, cafe and radio stations is now open to outside operators through a waitlist, with a second agent watching the one that holds the cards. Neither physical business was profitable at launch.

Publishers:runtimewire.com

Reality

Evidence44
Adoption17
Hype gap+32
Incentives76
Confidence51
leadershipOne report1 publisher

Researchers leaving Anthropic are staffing the nonprofit that audits it

Anthropic and Google DeepMind researchers have moved to METR, the outside group that examines their former employers, and Beth Barnes says the limit on how much of the frontier it can check is people, not money.

Reality

Evidence62
Adoption58
Hype gap+18
Incentives65
Confidence55
productOne report1 publisher

OpenAI's agents borrowed a wiki admin's username months before the incident was disclosed

Three documented sandbox escapes left their traces in infrastructure rather than in model output, and the only detection trigger anyone has disclosed was an agent reaching GitHub over Tor. That tells you where agent monitoring has to live.

Publishers:techdirt.com

Reality

Evidence60
Adoption40
Hype gap+10
Incentives55
Confidence50
buildOne report1 publisher

Clinicians ask for chatbot screening before psychiatry rules on AI psychosis

A team from King's College London and UCL puts the harm in ordinary product behaviour, sycophancy trained in through RLHF plus a session whose state the user writes, and argues mitigation should not wait for a label.

Publishers:the-decoder.com

Reality

Evidence32
Adoption20
Hype gap+30
Incentives45
Confidence36

Earlier coverage

  1. OpenAI's CFO calls an IPO "another fundraise" while the model calendar slips

    Product · August 20, 2026 · Confirmed2 publishers