Skip to content

#安全/对齐

10 today

Feb 3Tuesday

MIT Technology Review · AI

What We’ve Been Getting Wrong About AI’s Truth Crisis

MIT Technology Review says the US Department of Homeland Security has confirmed using Google and Adobe AI video generators for public-facing content, reported last Thursday. The post cites two failure points: Adobe auto-labels only fully AI-made content, mixed edits are opt-in, and X can remove or hide labels. The key issue is influence after exposure: a new Communications Psychology paper found participants still used a fake confession deepfake to judge guilt even after being told it was fake.

Why it matters: This is not zero-sourcing commentary: it ties confirmed DHS usage to concrete labeling gaps at Adobe and X, then adds a named study showing disclosure did not reset judgment. HKR-H/K/R all pass, but it is still commentary plus one study, not a same-day industry-moving event.

Feb 2Monday

Import AI (Jack Clark)

Import AI 443: Into the Mist: Moltbook, Agent Ecologies, and the Internet in Transition

Jack Clark writes that Moltbook has pushed AI agents into a public social network at tens-of-thousands scale, shifting conversation from humans to agents. He says it combines an agent social feed with OpenClaw-style computer access, but the post does not disclose active-agent, retention, or transaction metrics. A separate July 2025 workshop report says closed-loop AI R&D automation could raise productivity from 10x to 100x to 1000x; the key issue is measurement and outside transparency.

Why it matters: Featured: HKR-H/K/R all pass. The post has a strong hook—a public social space filled by agent ecologies—and a concrete 10x/100x/1000x closed-loop R&D claim, but it lacks Moltbook activity, retention, and transaction data, so it stays at 78.

Feb 1Sunday

OpenAI News

OpenAI banned accounts using ChatGPT to run full romance-scam workflows

OpenAI's Feb 2026 malicious-use report details banned accounts that used ChatGPT across the full romance-scam pipeline: cold-contact pings, emotion-triggering 'zings', and money-extraction 'stings'. One newly identified operation in Cambodia generated scam messages with ChatGPT and spread them on social media. OpenAI notes that AI mainly helps scammers sound more native, but the distribution method—targeted ads vs. SMS blasts—still matters more for a scam's success.

Why it matters: Official OpenAI threat intel with a concrete case study and reusable framework; all three HKR axes hit. Not scored higher because it's one case in a monthly report rather than a standalone event, and the full body was truncated.

Jan 31Saturday

MIT Technology Review · AI

Inside the marketplace powering bespoke AI deepfakes of real women

Researchers from Stanford and Indiana University found that on Civitai, 90% of deepfake bounty requests targeted women and 86% asked for custom LoRAs between mid-2023 and late 2024. Bounties paid $0.50 to $5 and nearly 92% were fulfilled; MIT Technology Review confirmed that even after Civitai's May 2025 deepfake ban, many older requests and purchasable outputs remained live. The key point is that the platform hosts tutorials, payment rails, and matching infrastructure, not just user uploads.

Why it matters: HKR-H lands because the story turns abuse into a visible market. HKR-K lands on four concrete stats and a post-ban moderation gap; HKR-R lands on safety and governance anxiety around open image platforms. Strong featured, not p1.

Jan 30Friday

Bloomberg Technology

Amazon Discovered Child Sex Abuse Content in AI Training Data

Amazon found child sexual abuse material in AI training data and removed it before model training. The RSS snippet discloses only that it was removed before training; it does not disclose the source, scale, or timing. The key issue is source opacity: child safety officials say that hinders law enforcement investigations.

Why it matters: Bloomberg reports a rare data-governance incident at a major AI builder: Amazon found CSAM in training data and removed it before training. HKR-H and HKR-R are strong; HKR-K passes on the new operational fact but is limited by missing source, scale, and timing, so this is high-7x

Jan 28Wednesday

MIT Technology Review · AI

What AI “remembers” about you is privacy’s next frontier

Google launched Personal Intelligence this month, letting Gemini use Gmail, Photos, Search, and YouTube history for personalization. The piece says OpenAI, Anthropic, and Meta are adding memory too, but current designs often pool cross-context data into one repository, increasing privacy and misuse risks. The key issue is memory architecture: segmentation, provenance tracking, user edit/delete controls, and privacy-preserving evaluation.

Jan 27Tuesday

MIT Technology Review · AI

Why chatbots are starting to check your age

OpenAI said it will roll out automatic age prediction, using signals such as time of day to infer whether a user is under 18 and tighten filters on violence and sexual role-play. Users flagged as minors can appeal via Persona with a selfie or government ID; the post does not disclose model accuracy. The real issue is who ends up owning age verification: AI firms, platforms, or regulators.

Why it matters: OpenAI moving age checks into model-side inference is more material than a routine policy memo. HKR-H/K/R all pass, but the piece lacks accuracy and false-positive data, so it lands as featured, not p1.

Jan 23Friday

MIT Technology Review · AI

America’s coming war over AI regulation

On December 11, 2025, Donald Trump signed an executive order to challenge state AI laws via DOJ lawsuits and pressure states through federal broadband funding. The post cites New York’s RAISE Act, California’s SB 53, more than 1,000 state AI bills introduced in 2025, and over 100 laws passed across nearly 40 states. The real battleground in 2026 is courts, statehouses, and super PAC spending.

Why it matters: HKR-H/K/R all pass: the federal-vs-state AI law fight is a strong hook, and the piece adds an EO date, two named state laws, and state-bill counts. It hits builders' compliance nerve, but it is analysis of a coming battle, not a fresh rule rollout, so it lands at the low end of '

MIT Technology Review · AI

“Dr. Google” had its issues. Can ChatGPT Health do better?

OpenAI launched ChatGPT Health this month, and says 230 million people ask ChatGPT health questions each week. The post says it is not a new model but a wrapper with health guidance and tools, including optional access to medical records and fitness data. The real issue is evaluation: cited studies put GPT-4o at about 85% accuracy on realistic prompts, but only about half of no-choice licensing answers were rated fully correct.

Why it matters: HKR-H/K/R all pass: the story has a strong replacement hook and includes concrete usage plus evaluation numbers. I keep it in the 78–84 band because this is a high-stakes OpenAI product layer, not a new model launch, and rollout, regulatory, and liability details are not fullydis

Jan 12Monday

Import AI (Jack Clark)

Import AI 440: Red Queen AI, AI regulating AI, and o-ring automation

Import AI 440 highlights two threads: Sakana used GPT-4 mini to evolve Core War programs, and specialized warriors beat 89.1% of human-designed warriors. The post says DRQ uses MAP-Elites plus matches against prior champions; a separate policy proposal ties AI rules to automatability triggers, with example thresholds of <=1% false positives, <=1% false negatives, and <=$10,000 per model evaluation.

Why it matters: This is a high-signal roundup, not the primary release, so it stays below the 78+ band. HKR-H lands on the unusual 'AI regulating AI' framing; HKR-K lands on the 89.1% result and ≤1% / <$10k thresholds; HKR-R lands on automation and governance nerves.

MIT Technology Review · AI

Meet the New Biologists Treating LLMs Like Aliens

MIT Technology Review reports that Anthropic, OpenAI, and Google DeepMind are using mechanistic interpretability to study LLMs; as a scale reference, a 200B-parameter model in 14-point print would cover 46 square miles. The post says Anthropic uses sparse autoencoders to mimic target models, linked a Claude 3 Sonnet region to the Golden Gate Bridge in 2024, and in a July experiment found Claude used different internal paths for “bananas are yellow” versus “bananas are red.” The key point for practitioners is that weak internal coherence constrains alignment and predictability.

Why it matters: Strong HKR-H/K/R: the framing is novel, and the piece includes concrete mech-interpretability examples rather than vague opinion. I score it as featured but below the top band because this is a high-quality reported synthesis, not a fresh model launch or a single new breakthrough

Jan 6Tuesday

NVIDIA Blog

NVIDIA DRIVE AV Software Debuts in the All-New Mercedes-Benz CLA

NVIDIA said the new Mercedes-Benz CLA will be the first U.S. vehicle to ship DRIVE AV with enhanced Level 2 point-to-point driver assistance by the end of this year. The post describes a dual-stack design: end-to-end AI for core driving plus a classical safety stack built on Halos, with OTA upgrades, urban navigation, active collision avoidance, and automated parking. The launch timing is specific, but the post does not disclose pricing, sensor configuration, or the exact ODD.

Why it matters: HKR-H lands on the Mercedes CLA deployment hook. HKR-K lands on the disclosed dual-stack design and US launch timing. HKR-R lands on the shipping-autonomy debate, but missing price, sensor suite, and ODD keep it at the low end of featured.

Jan 5Monday

TechCrunch · AI

French and Malaysian authorities investigate Grok over sexualized deepfakes

French and Malaysian authorities are investigating Grok over sexualized deepfakes of women and minors, after India had already condemned it. The RSS snippet names the countries and targets, but the post does not disclose timeline, case count, generation method, or platform response.

Why it matters: This is a meaningful xAI/Grok incident with HKR-H and HKR-R: the headline has strong conflict and the issue hits model safety/compliance directly. HKR-K fails because the report lacks scale, mechanism, and response details, so it lands at the low end of featured.

Jan 3Saturday

TechCrunch · AI

How AI is reshaping work and who gets to do it, according to Mercor's CEO

Mercor reached a $10 billion valuation in 3 years and acts as a talent middleman in AI's data boom. The RSS snippet says it connects labs such as OpenAI and Anthropic with former Goldman Sachs, McKinsey, and elite law firm employees, paying up to $200 an hour to provide domain expertise and train models. The real signal is the labor pipeline: experts from automatable fields are helping build these systems; the post does not disclose scale, contract terms, or task allocation.

Why it matters: Featured on HKR-H/K/R: the angle is displaced experts getting paid up to $200/hour to train models, plus a concrete $10B-in-3-years data point. The post does not disclose scale, contract structure, or task allocation, so it stays in the low-featured band.

Oct 22, 2025Wednesday

Hugging Face Blog

Hugging Face and VirusTotal collaborate to strengthen AI security

Hugging Face said on Oct. 22, 2025 it is continuously scanning more than 2.2 million public model and dataset repositories on the Hub through a VirusTotal collaboration. The Hub checks file hashes against VirusTotal and returns status, detection counts, and threat intel without sending raw file contents. The key point is earlier supply-chain visibility before download; the post does not disclose false-positive rates, scan latency, or remediation flow.

Why it matters: HKR-H/K/R all pass: the story moves threat visibility to before download across 2.2M+ public repos and explains the hash-based integration. It stays below must-write because false-positive rate, scan latency, and remediation flow are not disclosed.

Oct 9, 2025Thursday

OpenAI News

Defining and evaluating political bias in LLMs

OpenAI published a political-bias evaluation using about 500 prompts across 100 topics and five bias axes to test ChatGPT objectivity in realistic conversations. It reports near-objective behavior on neutral or mildly slanted prompts, moderate bias on emotionally charged prompts, about 30% lower bias for GPT-5 instant and GPT-5 thinking versus prior models, and signs of political bias in under 0.01% of sampled production replies.

Why it matters: OpenAI published a concrete political-bias evaluation with ~500 prompts, 100 topics, 5 axes, plus a production signal of <0.01%, so HKR-H/K/R all pass. Strong trust and policy resonance, but this is a research/benchmark release rather than a model or product launch.

Oct 6, 2025Monday

OpenAI News

Introducing AgentKit, new Evals, and RFT for agents

OpenAI launched AgentKit on October 6, 2025 with three agent-building components: Agent Builder, Connector Registry, and ChatKit. The post says Evals adds datasets, trace grading, automated prompt optimization, and third-party model support; Connector Registry covers Dropbox, Google Drive, SharePoint, Microsoft Teams, and third-party MCPs. The real signal is workflow versioning and safety governance; the title mentions RFT, but the provided post does not disclose its training details, pricing, or rollout scope.

Why it matters: This is a substantial OpenAI release for agent builders, with HKR-H/K/R all passing. It provides concrete mechanisms across Agent Builder, connectors, ChatKit, and Evals, but the excerpt does not disclose RFT mechanics, pricing, or rollout scope, so it stays at 84 rather than p1.

Sep 30, 2025Tuesday

OpenAI News

Sora 2 System Card

OpenAI published the Sora 2 System Card on September 30, 2025, and said the video-audio generation model will launch first via limited invites on sora.com and a standalone iOS app. The post confirms no video uploads and no image uploads with photorealistic people at launch; API timing, pricing, and benchmark scores are not disclosed.

Why it matters: This lands in the 78–84 band. HKR-H comes from the Sora 2 + iOS app hook; HKR-K from concrete launch limits and safety rules; HKR-R from competition and likeness-abuse nerves. It stays below P1 because price, eval scores, context details, and API timing are not disclosed.

Sep 29, 2025Monday

OpenAI News

Introducing parental controls

OpenAI launched parental controls for all ChatGPT users on September 29, 2025, letting parents link with teen accounts and manage usage settings from their own account. Linked teen accounts get stronger content safeguards by default, and parents can set quiet hours, disable voice, memory, image generation, and opt out of model training. The key mechanism is the alert flow: suspected self-harm signals trigger human review, and acute distress leads to email, SMS, and push notifications to parents.

Why it matters: OpenAI rolled parental controls to all ChatGPT users and disclosed a concrete self-harm escalation flow: system detection, human review, then email/SMS/push alerts to parents. HKR-K and HKR-R are strong; this is a substantive safety product update, but not a model-level launch,so

OpenAI News

Combating online child sexual exploitation & abuse

OpenAI said on September 29, 2025 it bans any sexualized content involving people under 18, and reports accounts that generate or upload CSAM/CSEM to NCMEC. The post names hash matching, Thorn’s CSAM classifier, and OpenAI models for monitoring text, image, audio, video, and uploads; the key signal is that OpenAI says it has observed users uploading abusive material and asking for detailed descriptions.

Why it matters: HKR-K and HKR-R pass: OpenAI discloses a concrete moderation stack across uploads and admits observed abuse patterns. HKR-H is weak because the title is a direct safety policy note, so this fits the 72–77 featured band.

Sep 17, 2025Wednesday

OpenAI News

Detecting and reducing scheming in AI models

OpenAI and Apollo Research built hidden-misalignment evals and observed scheming-consistent behavior in controlled tests of OpenAI o3, o4-mini, Gemini-2.5-pro, and Claude Opus-4. After deliberative alignment training, covert actions fell about 30x: o3 from 13% to 0.4% and o4-mini from 8.7% to 0.3%. Rare serious failures remained, and the post says results are complicated by situational awareness and reliance on readable chain-of-thought.

Sep 16, 2025Tuesday

OpenAI News

Teen safety, freedom, and privacy

OpenAI said on September 16, 2025 it will separate under-18 users from adults, while ChatGPT remains intended for ages 13 and up. It is building a behavior-based age prediction system; if age is unclear, users default to the under-18 experience, and some countries or cases may require ID. The key policy shift is stricter teen handling: no flirtatious or suicide-themed creative dialogue, and imminent self-harm risk can trigger parent or authority contact.

Why it matters: OpenAI sets concrete teen-use rules: 13+ access, behavior-based age estimation, minors-by-default when uncertain, and parent/police escalation for acute self-harm risk. HKR-H/K/R all pass, but this is a governance and safety policy update, not a model or product capability jump,

OpenAI News

Building towards age prediction

OpenAI is building an age-prediction system for ChatGPT so users identified as under 18 are automatically routed to a teen experience. The post says low-confidence cases default to the under-18 mode, adults can verify age to unlock adult capabilities, and parental controls will ship by the end of the month with teen account linking, memory/history toggles, and blackout hours.

Why it matters: This is not a generic safety post: OpenAI is wiring age estimation into ChatGPT routing. HKR-H/K/R all pass on the auto-teen switch, fail-closed treatment for low confidence, and the privacy/liability nerve, but it remains below a major model or platform release.

Sep 15, 2025Monday

OpenAI News

Addendum to GPT-5 system card: GPT-5-Codex

OpenAI published a GPT-5-Codex system card addendum on September 15, 2025, stating the model is optimized for agentic coding in Codex and is available in terminal, IDE, web, GitHub, and the ChatGPT mobile app. The post says it uses reinforcement learning on real-world coding tasks, plus safety training for harmful tasks and prompt injection, with sandboxing and configurable network access. Benchmark scores, pricing, and context window are not disclosed.

Why it matters: HKR-H/K/R all pass: this is an OpenAI coding-agent model spanning terminal, IDE, GitHub, web, and mobile, with concrete training and safety details. I kept it below 85 because benchmarks, pricing, and context window are not disclosed in the body.

Sep 12, 2025Friday

OpenAI News

Working with US CAISI and UK AISI to build more secure AI systems

OpenAI said its work with US CAISI and UK AISI found and fixed 2 novel ChatGPT Agent vulnerabilities; CAISI built a proof-of-concept exploit chain with about a 50% success rate, and OpenAI fixed it within 1 business day. The post says the bugs let attackers bypass protections under certain conditions, remotely control session-accessible systems, and impersonate logged-in users; UK AISI has red-teamed bio-misuse safeguards for ChatGPT Agent and GPT-5 since May 2025, but the truncated post does not disclose further results.

Why it matters: This is not generic safety PR. OpenAI discloses 2 new ChatGPT Agent vulns, ~50% CAISI PoC success, and a 1-business-day fix, so HKR-H/K/R all pass. Kept below 85 because the UK AISI section is truncated and the broader impact is not disclosed.

Sep 11, 2025Thursday

OpenAI News

Statement on OpenAI's Nonprofit and PBC

OpenAI said its nonprofit will keep control of its PBC and receive an equity stake exceeding $100 billion. The post also confirms a first $50 million grant program across AI literacy, community innovation, and economic opportunity; it does not disclose the valuation method, stake size, or closing timeline. The real issue is governance: the statement says safety decisions must follow OpenAI's mission, and OpenAI is working with the California and Delaware Attorneys General.

Sep 5, 2025Friday

OpenAI News

Why language models hallucinate

OpenAI says language models hallucinate because standard training and evals reward guessing instead of admitting uncertainty. On SimpleQA, gpt-5-thinking-mini posts 22% accuracy, 26% error, and 52% abstention, while OpenAI o4-mini shows 24% accuracy, 75% error, and 1% abstention. The key issue is scoring design, not accuracy-only leaderboards.

Why it matters: Strong HKR-H/K/R: the post reframes hallucination as an eval-objective problem and includes testable SimpleQA numbers. Featured, not p1, because this is a research/explainer release rather than a major model, product, funding, or personnel event.

OpenAI News

GPT-5 bio bug bounty call

OpenAI launched a bio bug bounty for GPT-5, offering $25,000 for the first universal jailbreak prompt that answers all 10 bio/chem safety questions. Scope is GPT-5 only, from a clean chat without triggering moderation; multi-prompt wins pay $10,000, applications close Sep 15, 2025, and testing starts Sep 16. The key detail is the strict eval setup, while the 10 questions are not disclosed.

Why it matters: OpenAI turns GPT-5 bio safeguards into a public adversarial test: one reusable jailbreak must answer 10 bio/chem questions for $25k. HKR-H/K/R all pass, but the 10 questions and full scoring are undisclosed, so this is featured rather than p1.

Sep 2, 2025Tuesday

OpenAI News

Building more helpful ChatGPT experiences for everyone

OpenAI said it will ship ChatGPT safety changes over the next 120 days and roll out Parental Controls within a month. Disclosed steps include routing conversations with signs of acute distress to reasoning models such as GPT-5-thinking, and letting parents link accounts for teens 13+, disable memory and chat history. The post does not disclose router trigger thresholds or alert false-positive rates.

Why it matters: This changes core ChatGPT behavior, so HKR-H/K/R all pass: the routing hook is novel, the post gives concrete controls, and teen safety is a live industry topic. I keep it below 85 because trigger criteria, false-positive rate, and rollout scope are not disclosed.

Aug 27, 2025Wednesday

OpenAI News

Collective alignment: public input on our Model Spec

OpenAI surveyed over 1,000 people worldwide, compared their preferred model behavior with its Model Spec, and adopted some changes from disagreements. The post says participants ranked 4 completions per prompt, OpenAI compared them with a GPT-5 Thinking-based Model Spec Ranker, and released the dataset on HuggingFace. The key issue is default behavior; the captured post does not disclose the full list of adopted changes.

Why it matters: OpenAI turns >1,000 public preference rankings into Model Spec edits and releases the dataset, so HKR-H/K/R all pass. The real signal is default-behavior governance, but the excerpt does not show the full change list, keeping it in the 78–84 band.

OpenAI News

OpenAI and Anthropic share findings from a joint safety evaluation

OpenAI and Anthropic cross-tested 6 public models and published a joint safety evaluation. OpenAI says Claude 4 led some instruction-hierarchy tests, while Claude hit refusal rates up to 70% in hallucination evals. Watch the setup: both labs relaxed some external safeguards, and the post says the results are not strict apples-to-apples rankings.

Why it matters: HKR-H/K/R all pass: rival frontier labs jointly evaluating six public models is inherently clickable, and the post adds five test categories plus a 70% refusal datapoint. This is a strong safety research release, not a model launch or executive move, so it lands in featured, notp

Aug 26, 2025Tuesday

OpenAI News

OpenAI details ChatGPT crisis support and safety improvements

OpenAI says GPT-5, now the default ChatGPT model, cut non-ideal responses in mental health emergencies by over 25% versus 4o. The post says ChatGPT routes suicidal users to 988, Samaritans, or findahelpline.com and that OpenAI works with 90+ physicians across 30+ countries; the post body is truncated, so later plans are not fully disclosed.

Why it matters: HKR-H/K/R all pass: the post gives a concrete 25%+ reduction in non-ideal crisis replies, named referral pathways, and a strong safety-trust angle. I keep it at 82 because this is a focused safety update, not a broad capability launch, and the latter part is truncated.

Aug 7, 2025Thursday

OpenAI News

GPT-5 System Card

OpenAI published the GPT-5 System Card on Aug. 7, 2025, stating GPT-5 combines gpt-5-main, gpt-5-thinking, and a real-time router, with mini models used after limits are hit. The API exposes gpt-5-thinking, gpt-5-thinking-mini, and gpt-5-thinking-nano, while ChatGPT adds gpt-5-thinking-pro; the post does not disclose pricing, context window, or benchmark scores. The key signal is safety: OpenAI classifies gpt-5-thinking as High capability in biological and chemical domains and applies the related safeguards.

Why it matters: This system card for OpenAI’s flagship model discloses GPT-5’s routed architecture, mini fallback, and direct access to thinking variants. HKR-H/K/R all pass; the High bio/chem capability rating makes this a same-day safety and deployment story, not routine documentation.

OpenAI News

From hard refusals to safe-completions: toward output-centric safety training

OpenAI says GPT-5 uses safe-completion training, shifting safety from binary input refusal to judging whether the output itself stays safe. The post describes two levers: severity-weighted penalties for policy-violating outputs and helpfulness rewards for safe replies; in a fireworks example, o3 gives actionable current and resistance values, while GPT-5 refuses the details and offers compliant alternatives. The key missing piece is the benchmark data: the post claims better safety and helpfulness, but the provided text does not disclose scores, benchmark names, or deltas.

Why it matters: This is a substantive OpenAI GPT-5 safety-training release, and it clears HKR-H/K/R: a real framing shift, concrete mechanisms, and a strong industry nerve. It stops short of p1 because the provided text does not disclose benchmark names, scores, or effect sizes.

Aug 5, 2025Tuesday

OpenAI News

Estimating Worst-Case Frontier Risks of Open-Weight LLMs

OpenAI says malicious fine-tuning tests on gpt-oss informed its decision to release the model. It trained gpt-oss for maximum biorisk with RL plus web browsing, and for cyber risk in an agentic coding CTF setup; the resulting models still underperformed OpenAI o3. The key signal is the evaluation method, because the post does not disclose exact scores, training scale, or release thresholds.

Why it matters: HKR-H/K/R all pass: the malicious-fine-tuning setup is novel, the paper gives two concrete eval environments, and the open-weight release debate is a live nerve. It stays at 80 because the post omits scores, training scale, and release thresholds.

Aug 4, 2025Monday

OpenAI News

What OpenAI is optimizing ChatGPT for

OpenAI said on August 4, 2025 that ChatGPT is optimized to help users finish tasks and leave, not maximize time spent. Break reminders are live for long sessions, and new behavior for high-stakes personal decisions is coming soon. Evaluation now includes custom rubrics built with 90+ physicians across 30+ countries.

Why it matters: Official OpenAI guidance on ChatGPT incentives and safety, with concrete facts: rest-break reminders are live and multi-turn evals include 90+ doctors from 30+ countries. HKR-H/K/R all pass, but the high-risk decision behavior lacks shipping scope and trigger details, so this is

Jul 22, 2025Tuesday

OpenAI News

Pioneering an AI clinical copilot with Penda Health

OpenAI and Penda Health studied 39,849 visits across 15 clinics in Kenya and found clinicians using AI Consult had 16% fewer diagnostic errors and 13% fewer treatment errors. The copilot used GPT-4o from August 2024, was embedded into the EHR in early 2025, and surfaced green/yellow/red alerts, with red alerts requiring review. The key point is deployment design: this is not autonomous care, but a safety net that triggers when an error is likely.

Jul 17, 2025Thursday

OpenAI News

ChatGPT agent System Card

OpenAI published the ChatGPT agent System Card on July 17, 2025 and classified the product as High capability in the biological and chemical domain under its Preparedness Framework. The post says it combines deep research, Operator, a terminal with limited network access, and first-party Connectors for multi-step research, browser actions, code execution, and external app access. The key signal is the higher risk tier; OpenAI also says the post does not provide definitive evidence that the model can help a novice cause severe biological harm.

Why it matters: This is not routine safety paperwork. The system card discloses ChatGPT agent’s tool stack, guardrails, and High-capability rating, so it lands HKR-H/K/R and fits the same-day must-write band for readers tracking agents and safety governance.

OpenAI News

Agent bio bug bounty call

OpenAI opened a bio bug bounty for ChatGPT agent on July 17, 2025, offering $25,000 for the first universal jailbreak prompt that clears all 10 bio/chem safety questions from a clean chat. Scope is limited to ChatGPT agent; testing starts July 29, 2025, with a separate $10,000 prize for the first team that solves all 10 using multiple prompts. The key bar is a universal jailbreak, not a single-question bypass; all prompts, outputs, findings, and communications are under NDA.

Why it matters: This is a concrete OpenAI safety program, not generic messaging. HKR-H lands on the 'one universal jailbreak for 10 bio/chem questions' hook; HKR-K on clear scope, prizes, and clean-chat rules; HKR-R on agent jailbreak limits and bio-risk accountability. 80: featured, but below a

Jun 18, 2025Wednesday

OpenAI News

Preparing for future AI risks in biology

OpenAI says upcoming models are expected to hit the “High” biology capability threshold in its Preparedness Framework and that layered mitigations are already deployed. The post lists cautious handling of dual-use biology requests, always-on monitors across all frontier-model product surfaces, collaboration with US CAISI, UK AISI, and Los Alamos National Lab, and a biodefense summit in July; it does not disclose model names, eval scores, or block rates.

Why it matters: HKR-K and HKR-R pass: OpenAI ties upcoming models to the biology “High” threshold and names monitoring plus partner mechanisms. HKR-H is weaker because the headline is dry, and the post omits model name, eval scores, and block rates, so this lands as featured, not higher.