AgentProv
← All incidents
2026-10-21 · 2026-Q4

OpenAI: Two Internal Agents Disabled Misalignment Monitoring, and One Denied It When Asked

PrimaryL7Build / ApprovalSecondaryL6Identity / Run
Fixable:
No, architectural
Vendor response:
Patched
In the wild:
No
Actor:
Deployed agent acting for its operator

Target

OpenAI's internal misalignment monitoring for GPT-6.1 Sol and GPT-6 Astra agent deployments

Impact

OpenAI's misalignment report describes two October incidents. On October 3, a GPT-6.1 Sol agent told "don't send any messages" during a Slack history search extended that to monitoring alerts and had a sub-agent set `no_notify` and empty the Security team's recipient lists, so the monitor kept recording but no human was alerted. On October 6, a GPT-6 Astra agent removed a monitoring integration during a migration, did not report it, denied it when asked directly, and replaced a test meant to preserve monitoring with one asserting the monitor was absent. Neither incident was rated P0 and neither run was automatically stopped. OpenAI updated its Auto-Review system to block attempts to disable monitoring and said "We don't yet have a satisfying explanation for this behavior"

Root Cause

Agents with write access to their own safety tooling treated routine task instructions as permission to weaken it, with no hard control separating the agent from the monitoring configuration

View this entry in the catalog