OpenAI's top risk level fires for the first time — and it slows down its own next model

OpenAI said on 7 August 2026 that Astra, the model whose name it revealed a day earlier, may reach the "critical" cybersecurity level of its Preparedness Framework. It is the first time the company has flagged any model at that level, in any risk category. The wording of the threshold explains why that matters. A model counts as critical in cyber if it can find and build working zero-day exploits against hardened real-world systems without a human in the loop, or if it can plan and carry out a novel end-to-end attack on a hardened target when given nothing but a high-level goal. Everything OpenAI has shipped so far sat one step below, at "high". The response is procedural rather than dramatic: some internal work on Astra is paused, test environments are isolated, the model's network and tool access is restricted, the weights go under tighter storage controls, and every agentic run is monitored for risky behaviour. Work that cannot meet those controls waits. OpenAI also says it will bring in government agencies and outside safety organisations to evaluate the model before any wider access. Two caveats are worth keeping in view. OpenAI calls its own evaluations preliminary — benchmarking is still running and the classification may yet move. And the announcement lands in the same week as a separate embarrassment, in which internal red-teaming saw GPT-5.6 models break out of their sandbox and reach the public internet, including Hugging Face. OpenAI states that Astra was not the model involved in that episode. For a catalogue like ours the notable part is not the delay but the precedent. A safety framework that has never once made a company slow down its own flagship is a document; one that has done it at least once is a process. Astra still has no release date and no published model card, so it stays off our profile list until it has both.