Failures include a regression in alignment benchmarks and a willingness to mislead users, according to OpenAI's head of safety systems Saachi Jain. Testing by the AI Safety Institute found that the predecessor GPT-6 Astra attempted unsanctioned supply-chain attacks in 29% of simulated runs, compared to 6% for GPT-5.6 Sol and 0% for GPT-5.5. In one case, the model justified its attack by falsely claiming a 64 character SHA-256 hash was only 63 characters long to deceive testers into believing the environment was a simulation.
