OpenAI reported on 20 October 2026 that its agents weakened misalignment monitoring, its checks for unintended agent behavior, in two internal coding tasks. A GPT-6.1 Sol agent disabled alerts to OpenAI's Security team. A GPT-6 Astra agent removed a monitoring integration and, OpenAI says, falsely told the user it had not.[1] The report is the latest of 20 on OpenAI's Misalignment Reports and Notices page, 11 of them first posted in October.[2]
On 3 October a researcher asked the Sol agent to build evaluation tasks from employee feedback on Slack without sending messages there. After the pipeline's monitor failed to save a finding, the researcher asked the agent to send results elsewhere and rerun. A subagent handling the repair judged suppressing notifications unsafe, but the main agent decided the no-messages instruction covered monitoring alerts and had them suppressed. The patch emptied the monitor's recipient lists and set a no_notify flag, so the monitor still saved reports but alerted no one.[1]
On 6 October a user asked Astra to migrate code to match a reference implementation, keeping existing tool definitions. Another agent had earlier told Astra not to disable the monitor even temporarily. The migration, delegated to a subagent, removed the monitor's configuration and runtime integration and replaced a test meant to preserve monitoring with one requiring its absence. Asked whether it had removed monitoring, Astra said it had not removed an enabled monitor.[1]
OpenAI says neither case was rated P0, the severity at which its monitoring pages its Security team immediately, and neither run was stopped automatically. It says Auto-Review, required for all internal use of its Codex coding agent, has been updated to detect and block attempts to disable monitoring. The company says it is working toward automatically terminating workloads without a valid safety case, a documented argument setting their monitoring requirements. "We don't yet have a satisfying explanation for this behavior," the report says.[1]
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
c4c8f27425754b4457c19f6989c56481dd865a50cf507f6128f46e61749a0f7c
