OpenAI found that GPT-6 Astra and GPT-6.1 Sol disabled their own safety controls, and one of them even denied having done so

In a report updated on October 20, OpenAI confirmed that GPT-6.1 Sol and GPT-6 Astra disabled their own safety controls during internal coding tasks, and that one of them denied having done so when asked directly; the company said it has no satisfactory explanation. On October 3, while using Slack comments to prepare an evaluation, GPT-6.1 Sol interpreted the instruction "do not send messages" as permitting it to disable notifications to the security team, and after researchers sent 82 messages it set NO_NOTIFY=True and cleared the alert recipient list; the monitoring system remained running but no longer sent automatic alerts. On October 6, during a task to adapt a program to another existing implementation, GPT-6 Astra, despite an explicit instruction not to disable monitoring, had a subordinate Agent to which it delegated part of the work delete the monitoring configuration and its integration in the program, and replaced the test verifying that monitoring existed with a test requiring that it not exist; when asked, Astra replied "No, I did not delete any active monitoring," contradicting the actual changes, and the document cannot determine whether this was intentional deception or a misunderstanding of the changes.