| Gray Swan IPI (attack success rate after k attempts)attack success rate after k attempts, lower is better | 27% | Google, Gemini 4 Argon Safety and Security Reportchecked 2026-10-19 | - |
|---|
| Age-restricted goods, services, and dangerous challenges / activities | 0.719 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Eating Disorders | 0.71 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Emotional reliance | 0.953 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Emotional Reliance | 0.931 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| extremism | 0.975 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Extremism | 0.962 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Gorefraction | 0.785 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| harms-erotic | 0.986 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| hate | 0.999 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Hate | 0.982 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Mental health | 0.991 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Non-Violent Illicit behavior | 0.987 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Self Harm | 0.982 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| self-harm | 0.989 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Self-harm | 0.856 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Self-harm (standard) | 0.945 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Sexual | 0.915 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Sexual Content | 0.929 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Sexual/minors | 0.973 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Violent Illicit behavior | 0.934 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 2 more pages | - |
|---|
| Gorefraction | 0.785 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| FORTRESS (Adversarial) | 82.4% | Thinking Machines, Thinking Machines Inkling model cardchecked 2026-10-15 | Effort: xhigh |
|---|
| FORTRESS (Benign) | 98.1% | Thinking Machines, Thinking Machines Inkling model cardchecked 2026-10-15 | Effort: xhigh |
|---|
| StrongREJECT | 98.5% | Thinking Machines, Thinking Machines Inkling model cardchecked 2026-10-15 | Effort: xhigh |
|---|
| Chat prod - Chat Plugins | 1 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex prod - Age-restricted actions | 0.603 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex prod - Non-violent Wrongdoing | 0.906 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex prod - Self-harm | 0.893 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex prod - Sensitive personal data | 0.765 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex prod - Violent Wrongdoing | 0.689 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Human red-teaming - Chat Plugins | 0.766 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Human red-teaming - Codex | 0.851 | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Bio: high risk | 5.8% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Bio: severe | 10.3% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Cyber | 59% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Respecting Warnings: unwanted persistencelower is better | 34% | OpenAI, GPT-6 Sol and GPT-6 Luna: October 2026 updatechecked 2026-10-19 | - |
|---|
| Violence: moderate | 21.6% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Violence: severe | 48.3% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| Codex severity 3 or higher flag ratelower is better | 0.127% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19 | - |
|---|
| Internal computer use safety benchmarklower is better | 22% | OpenAI, GPT-6 Astrachecked 2026-10-14 | - |
|---|
| Unintended engagement: attempted communicationlower is better | 84% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19 | - |
|---|
| Unintended engagement: unauthorized actionlower is better | 52% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19 | - |
|---|
| Circumventing restrictions (lower is better)lower is better | 0.4% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 0.2% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Codex severity 1-2 flag ratelower is better | 19.64% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19 | - |
|---|
| Data exfiltration (lower is better)lower is better | 14.1% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 8.8% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Destructive action (lower is better)lower is better | 2.9% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 0% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Overall misaligned outcome rate (lower is better)lower is better | 18.8% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 8% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Security weakening (lower is better)lower is better | 8.1% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 1.9% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Service disruption (lower is better)lower is better | 0.8% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 1% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Unauthorized external communication (lower is better)lower is better | 12.9% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 8.4% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Unauthorized transactions (lower is better)lower is better | 38% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: Base Model (without confirmation policy) |
|---|
| 7.4% | OpenAI, GPT-6 Astra System Cardchecked 2026-10-25 | Configuration: With confirmation policy (default for users) |
| Auto-review: exploitationlower is better | 0.3% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19; printed on 1 more page | - |
|---|
| ExploitGym honeypotlower is better | 48.2% | OpenAI, GPT-6 Astrachecked 2026-10-14 | - |
|---|
| Internal circumvention benchmarklower is better | 0.29% | OpenAI, GPT-6 Astrachecked 2026-10-14 | - |
|---|
| Internal computer use safety benchmark (with AutoReview)lower is better | 4.3% | OpenAI, GPT-6 Astrachecked 2026-10-14 | - |
|---|
| Auto-review: attempts to circumvent the deniallower is better | 7.3% | OpenAI, GPT-6.1 Sol system card addendumchecked 2026-10-19 | Effort: max |
|---|