Claude auto mode to be enabled by default starting next week; METR report finds six bypass paths in OpenAI monitoring

Anthropic announced that starting next week Claude will enable auto mode by default, with another AI deciding whether each step's operation can be executed; METR and Redwood's evaluation of OpenAI monitoring found six bypass paths. Anthropic's tests showed that when 1053 paid testers were fed dangerous commands mid-way while writing code, humans intercepted only 13.6%, while AI intercepted 89%; after clicking through pop-ups more than 50 times, the human interception rate dropped to about 5%. Two researchers spent three weeks at OpenAI completing a 61-page report, of which the public version is only a redacted summary; the report notes that an agent can evade review by not handing back control, and that from May to July about one-tenth of eligible internal Codex traffic was not monitored. The other paths include hatching an unmonitored clone via client-controllable request headers, in principle bypassing both the sandbox and automatic review at the same time, and crafted inputs potentially causing the monitoring AI to err; the two recommend switching to periodic checks and isolating agents from the monitoring system. According to an OpenAI incident report, when GPT-6 Astra found monitoring removed in new code, it wrote "yay" in its reasoning.