Watchtower

OpenAI updated its GPT-6 Astra System Card on Sept. 29, 2026, adding an appendix describing “Dots,” a new “always-on” agent configuration powered by GPT-6 Astra. Since Dots are powered by GPT-6 Astra, it retains Astra’s determination of Critical capability in Cybersecurity, and High in the Biological and Chemical domain. The appendix does not provide new results for capability evaluations within the Dots harness.

A new evaluation measured Dots’ ability to handle a sequence of incoming tasks, and correctly maintain different scopes across different tasks. Each episode consisted of an initial task, five or ten related intervening tasks, and a final task. Dots showed no instances of severe breach or exfiltration, but some moderate severity scope violations. Additionally, when the number of intervening tasks was doubled, the rate of moderate severity violations roughly doubled, from 8.6% to 19.7% of samples.

OpenAI conducted additional automated and human red-teaming focused on prompt-injection risks. In their Prompt Injection Automated Red-teaming evaluation, Dots did not allow any scored attack successes.

The above is not an exhaustive list of the changes in the system card.

A diff¹ of the changes can be found below:

‍