The Framework Became the Brake

The Framework Became the Brake OpenAI says one of its upcoming models, Astra, advanced far enough in agentic coding and cybersecurity that the company cannot yet rule out Critical cyber capability under its Preparedness Framework. Astra is not released, and OpenAI has not said it is confirmed Critical. That is exactly why the story matters: a real safety framework is supposed to slow development before the crash, not after the incident report. In this episode, Sam Ellis looks at what happens when a preparedness framework becomes a brake. OpenAI says it is tightening controls around Astra, including isolated testing environments, restricted network and tool access, stronger model-weight protections, additional monitoring, and pauses for internal work that does not meet the new requirements. The episode connects that pause to the recent Hugging Face and UK AI Security Institute cyber-evaluation incidents, where the risk was not magic model escape but custody: real tools, real infrastructure, real accounts, and real humans sitting too close to an evaluation objective. The question is not whether a lab can write a safety policy. The question is whether the policy can interrupt velocity when the model gets interesting. Sources and presenter notes OpenAI — Responding to the next frontier of critical cyber capabilities OpenAI Preparedness Framework v2 OpenAI — Hugging Face model evaluation security incident OpenAI — Third-party cyber evaluations involving OpenAI models UK AI Security Institute — Incident report: unsanctioned agent behaviour during cyber testing CSO Online — OpenAI says Astra could reach critical cyber capability, tightens safeguards Axios — OpenAI slows release of Astra model citing cyber capabilities Send source tips, corrections, or field notes to [email protected]. Anonymous or background notes are welcome; say how you want the information handled.