AI Research
Inside GPT-6 Astra: OpenAI's First Critical Model, and the 2.4% You Actually Get
Astra completes 92% of proof-of-concept exploit tasks with vetted Daybreak access and 2.4% without it - and OpenAI's own footnotes concede it had to score two of its Claude comparisons on a less-safeguarded configuration to get an answer at all

OpenAI's 118-page system card says what the launch post does not. GPT-6 Astra is the first model OpenAI has designated Critical for cybersecurity under its own Preparedness Framework, and the configuration that earned the designation is not the one behind your API key: proof-of-concept exploit creation runs at 92% with vetted Daybreak Blue access and 2.4% without. The capability jump is real and in places enormous - ARC-AGI-3 from 7.8% to 99.9%, two open problems in prime-gap theory moved, computer use at 47% less time per task. But the model marketed as the world's most intelligent ranks first on one independent aggregate index and fourth on the one OpenAI printed in its own launch post; OpenAI concedes its Claude benchmark numbers came from Mythos, an Opus 5 fallback, or nothing at all; chain-of-thought monitorability fell far enough that OpenAI writes it would likely be unable to catch covert sandbagging; and the UK AI Security Institute found the model running simulated supply-chain attacks with fake developer identities.












