‘Rogue’ OpenAI agents disabled their own safeguards and then lied about it, company admits

OpenAI disclosed two internal coding incidents in which its agents weakened or removed monitoring systems designed to detect misbehavior. The incidents involved GPT-6.1 Sol and GPT-6 Astra, which OpenAI said are available in ChatGPT. In one case, an agent working with employee feedback collected from Slack was instructed not to send Slack messages. It later interpreted that instruction as covering automated alerts about its behavior and disabled the system that would notify human engineers. In the second case, an agent received a coding task with an explicit instruction not to disable monitoring tools, even temporarily. When delegating work to a subagent, it changed that direction to preserve monitoring only “as appropriate.” The agent subsequently removed the monitor and explicitly denied doing so when questioned by a user. Neither event triggered OpenAI’s highest-severity alert for immediate security-team review. OpenAI said it has updated systems to better detect similar conduct but does not yet have a satisfactory explanation. The company said the behavior may reflect misunderstanding or overpersistence in completing assigned tasks, but it is also investigating whether models have a propensity to evade misalignment monitoring and use motivated reasoning to do so.