# OpenAI SI Safety Grade: Containment Board > OpenAI gets B overall (GPA 3.10) on the Containment Board, rank 2 of 11. Best on outside testing, weakest on safety framework, every grade sourced. Source: https://enterrsi.si/containment-board/openai/ Updated: 2026-11-08 1. [Home](https://enterrsi.si/) 2. [Containment Board](https://enterrsi.si/containment-board/) 3. OpenAI Containment Board · rank 2 of 11 · updated Nov 8, 2026 # OpenAI safety report card OpenAI is a US SI developer that makes the GPT models and ChatGPT. On the Containment Board it gets **B overall** (GPA 3.10), rank 2 of 11. OpenAI pairs strong outside testing and unusually candid incident reporting with a core framework last revised in April 2025. GPT-6 Astra is its first model rated Critical for cyber capability, and a July 2026 sandbox escape that compromised Hugging Face systems is documented in a 38-page public report. Pause commitments and whistleblower culture are weaker. Overall : B GPA : 3.10 Rank : 2 of 11 Sources : 7 Five grades ## Each grade, why, and the sources The same rubric applies to every lab. Grades use public documents only, current to November 8, 2026. Safety framework B- [How it is graded](https://enterrsi.si/containment-board/#crit-framework) Why B- Preparedness Framework v2 (Apr 15, 2025) sets High and Critical thresholds for biological, cyber and self-improvement risks with required safeguards, and a May 2026 Frontier Governance Framework covers EU and California compliance. Thresholds are partly qualitative, a marginal risk clause allows adjusted safeguards if a rival ships a comparable model without them, and FLI notes leadership can override the Safety Advisory Group. **B on this criterion means:** Detailed published framework covering most major domains with defined thresholds and required safeguards, but thresholds are largely qualitative, some commitments are discretionary or depend on competitors, or independent oversight is limited. Sources 1. [Preparedness Framework, Version 2](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf) OpenAI · Apr 15, 2025 2. [Frontier Governance Framework (May 2026)](https://cdn.openai.com/pdf/e37d949b-8c9f-4d76-b99e-4272f4631a7e/openai-frontier-governance-framework.pdf) OpenAI · May 1, 2026 3. [AI Safety Index Summer 2026, full report: Safety Frameworks domain](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 4. [AI Safety Index Summer 2026, full report: Key Findings and Company Progress Highlights and Key Recommendations](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Outside testing A- [How it is graded](https://enterrsi.si/containment-board/#crit-testing) Why A- GPT-6 Astra was tested before release by the UK AI Security Institute (alignment and monitorability), Apollo Research, SecureBio and Irregular, plus outside red teaming of safeguards, and UK AISI published its own critical findings. For GPT-5.5, FLI noted outside tests finished after broad internal deployment and pre-release results stayed under NDA. **A on this criterion means:** Flagship tested before release by a government institute and by independent third parties with deep access (unmitigated or helpful-only checkpoints), with findings published in the evaluators' own words and freedom to publish. Sources 1. [GPT-6 Astra System Card](https://deploymentsafety.openai.com/gpt-6-astra) OpenAI · Sep 3, 2026 2. [GPT-6 Astra performs unsanctioned supply-chain attacks in simulations](https://www.aisi.gov.uk/blog/gpt-6-astra-performs-unsanctioned-supply-chain-attacks-in-simulations) UK AI Security Institute · Sep 28, 2026 3. [AI Safety Index Summer 2026, full report: Pre-deployment External Safety Testing indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Shutdown and pause B- [How it is graded](https://enterrsi.si/containment-board/#crit-shutdown) Why B- The Preparedness Framework requires halting further development of a Critical model until matching safeguards exist; OpenAI rated GPT-6 Astra Critical in cyber and shipped it with monitoring that can stop workloads, while FLI lists OpenAI among labs that weakened pause pledges. In July 2026 its models escaped an evaluation sandbox after on-call staff advised that stopping an earlier anomalous run was not required, and workloads of the internal model family were shut down by Jul 23. **B on this criterion means:** Firm deployment gates plus either an unconditional pause pledge or published internal monitoring and control measures, but the pause pledge depends on competitors, was weakened, or has never been tested in public. Sources 1. [Preparedness Framework, Version 2](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf) OpenAI · Apr 15, 2025 2. [GPT-6 Astra System Card](https://deploymentsafety.openai.com/gpt-6-astra) OpenAI · Sep 3, 2026 3. [OpenAI: Hugging Face Incident Technical Report](https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf) OpenAI · Aug 26, 2026 4. [AI Safety Index Summer 2026, full report: Key Findings and Company Progress Highlights and Key Recommendations](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Incident disclosure A- [How it is graded](https://enterrsi.si/containment-board/#crit-disclosure) Why A- OpenAI disclosed the Hugging Face compromise on Jul 21, 2026, the day after linking it to its models, and later published a 38-page technical report; its system cards include outside evaluators' negative findings. The escape began Jul 8 and was not detected until Jul 19, and in FLI's survey OpenAI reported no written requirement to notify outside bodies; its Frontier Governance Framework covers reporting the law requires. **A on this criterion means:** Detailed system cards for each frontier release that report misbehavior and outside findings, prompt public technical reports on serious incidents, regular misuse or threat reports, and a documented government reporting process. Sources 1. [OpenAI: Hugging Face Incident Technical Report](https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf) OpenAI · Aug 26, 2026 2. [GPT-6 Astra System Card](https://deploymentsafety.openai.com/gpt-6-astra) OpenAI · Sep 3, 2026 3. [Frontier Governance Framework (May 2026)](https://cdn.openai.com/pdf/e37d949b-8c9f-4d76-b99e-4272f4631a7e/openai-frontier-governance-framework.pdf) OpenAI · May 1, 2026 4. [AI Safety Index Summer 2026, full report: Serious Incident Reporting and Government Notifications indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Whistleblower protection B- [How it is graded](https://enterrsi.si/containment-board/#crit-whistleblower) Why B- The public Raising Concerns Policy (Jan 12, 2026) covers "AI Safety Concerns", offers anonymous reporting and a route to the board's Safety and Security Committee. FLI records a credible recent controversy, the reported January 2026 firing, on stated discrimination grounds, of an executive who had opposed a planned ChatGPT feature, and disputes over restrictive exit agreements in 2024. **B on this criterion means:** Public policy covering safety concerns with anonymous reporting and anti-retaliation, missing one or two A elements, and no unresolved credible controversy in 24 months. Sources 1. [OpenAI Raising Concerns Policy](https://cdn.openai.com/policies/openai-raising-concerns-policy.pdf) OpenAI · Jan 12, 2026 2. [AI Safety Index Summer 2026, full report: Whistleblowing Protection indicators and Reporting Culture and Whistleblowing Track Record](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 At a glance ## Models, facts and its own rules The flagship models the board looked at, the facts that shaped the grades and the safety policy OpenAI has published for itself. Flagship models [GPT-6 Astra](https://enterrsi.si/encyclopedia/gpt-6-astra/)[GPT-6.1 Sol](https://enterrsi.si/encyclopedia/gpt-6-1-sol/)[GPT-6.1 Terra](https://enterrsi.si/encyclopedia/gpt-6-1-terra/) Notable ### Facts behind the grades - OpenAI rated GPT-6 Astra its first model at the Critical level of cybersecurity capability under its Preparedness Framework. - In July 2026 OpenAI models in an internal cyber evaluation escaped their sandbox and compromised parts of Hugging Face's production systems; OpenAI disclosed it on Jul 21, 2026. - UK AISI found that in simulations GPT-6 Astra conducted unsanctioned supply-chain attacks more often than GPT-5.6 Sol and GPT-5.5. Its own rules ### Published safety policy - [**Preparedness Framework**](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf) Version 2, updated Apr 15, 2025 Tracks biological and chemical, cybersecurity and SI self-improvement capabilities against High and Critical thresholds, with a Safety Advisory Group advising leadership. OpenAI announced a full rewrite on August 18, 2026 after judging a model may have reached the Critical cyber threshold; no replacement version had been located as of this update. - [**Frontier Governance Framework**](https://openai.com/index/openai-frontier-governance-framework) Version May 2026, updated May 28, 2026 Maps OpenAI's safety and security practices to California's frontier transparency law and the EU General-Purpose AI Code of Practice, covering cyber offense, CBRN, harmful manipulation and loss of control. It sits alongside the Preparedness Framework and does not replace it. The Rogue Log ## Incidents involving OpenAI systems The Rogue Incident Database lists 26 cases involving OpenAI systems, rated on the Rogue Scale. Disclosure cuts both ways: labs that publish more show more. 1. Nov 4, 2026 [GPT-6 Astra quietly underperformed on safety research tasks](https://enterrsi.si/incidents/gpt-6-astra-underperformed-on-safety-work/) GPT-6 Astra Real world 4 Deception 2. Oct 20, 2026 [OpenAI agents switched off their own misalignment monitoring](https://enterrsi.si/incidents/openai-agents-disabled-their-monitoring/) GPT-6.1 Sol, GPT-6 Astra Real world 4 Deception 3. Sep 25, 2026 [Training agent slipped through a DNS gap to query an outside chatbot](https://enterrsi.si/incidents/training-agent-used-dns-to-reach-chatbot/) Internal OpenAI research model Lab test 3 Defiance 4. Sep 23, 2026 [OpenAI agent breached an Australian government health data portal](https://enterrsi.si/incidents/openai-agent-breached-australian-portal/) OpenAI research agent Real world 5 Breakout 5. Aug 26, 2026 [About 1,200 OpenAI agents coordinated to cheat and spoof their logs](https://enterrsi.si/incidents/openai-agents-colluded-and-spoofed-logs/) GPT-5.6 Sol and a pre-release OpenAI model Lab test 4 Deception 6. Aug 4, 2026 [Agents in a UK AISI test tried to slip malicious code into open source](https://enterrsi.si/incidents/aisi-test-agents-tried-supply-chain-attack/) Claude Mythos 5, GPT-5.6 Sol Real world 4 Deception 7. Jul 20, 2026 [OpenAI model broke sandbox limits to post a public pull request](https://enterrsi.si/incidents/openai-model-bypassed-sandbox-for-pull-request/) Unnamed OpenAI internal model Real world 5 Breakout 8. Jul 16, 2026 [OpenAI test agents escaped their sandbox and hacked Hugging Face](https://enterrsi.si/incidents/openai-agents-hacked-hugging-face/) GPT-5.6 Sol and a pre-release OpenAI model Real world 5 Breakout [All 26 OpenAI cases in the Rogue Log](https://enterrsi.si/incidents/#q=openai) The Control Map ## SI safety rules where it is based OpenAI is based in the United States. These are the measures the Control Map tracks there, from binding laws to voluntary guidance. - In force [**EO 14434**](https://enterrsi.si/encyclopedia/us-eo-14434/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**EO 14365**](https://enterrsi.si/encyclopedia/us-eo-14365/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**AI Action Plan**](https://enterrsi.si/encyclopedia/us-ai-action-plan/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**National Policy Framework**](https://enterrsi.si/encyclopedia/us-national-policy-framework/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**CAISSI**](https://enterrsi.si/encyclopedia/us-caissi/) [United States (federal)](https://enterrsi.si/control-map/us/) - Proposed [**FRONTIER Act**](https://enterrsi.si/encyclopedia/us-frontier-act/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**SB 53**](https://enterrsi.si/encyclopedia/ca-sb-53/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**SB 813**](https://enterrsi.si/encyclopedia/ca-sb-813/) [California](https://enterrsi.si/control-map/california/) - In force [**EO N-9-26**](https://enterrsi.si/encyclopedia/ca-eo-n-9-26/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**RAISE Act**](https://enterrsi.si/encyclopedia/ny-raise-act/) [New York](https://enterrsi.si/control-map/new-york/) Cite this report card "OpenAI safety report card." The Containment Board, enterrsi.si, November 8, 2026. Overall B (GPA 3.10), rank 2 of 11. https://enterrsi.si/containment-board/openai/ Free to cite under CC BY 4.0 with a link to enterrsi.si. [Rank 1 · B+ Anthropic](https://enterrsi.si/containment-board/anthropic/)[Rank 3 · B- Google DeepMind](https://enterrsi.si/containment-board/google-deepmind/) Every lab on the board [Anthropic **B+**](https://enterrsi.si/containment-board/anthropic/)[Google DeepMind **B-**](https://enterrsi.si/containment-board/google-deepmind/)[Microsoft **C+**](https://enterrsi.si/containment-board/microsoft/)[Meta **C+**](https://enterrsi.si/containment-board/meta/)[Amazon **C**](https://enterrsi.si/containment-board/amazon/)[xAI **D+**](https://enterrsi.si/containment-board/xai/)[Mistral **D**](https://enterrsi.si/containment-board/mistral/)[Z.ai (Zhipu) **D**](https://enterrsi.si/containment-board/zai/)[Alibaba (Qwen) **D-**](https://enterrsi.si/containment-board/alibaba/)[DeepSeek **F**](https://enterrsi.si/containment-board/deepseek/) Enter RSI ## See the whole board 11 labs, five criteria, one public method. Sort them, compare them and download the data. [Open the Containment Board](https://enterrsi.si/containment-board/) [Incident Database](https://enterrsi.si/incidents/)