OpenAI said on 1 September that Astra is the first model it rates critical for cyber risk. In tests it found two unknown flaws in a browser engine and chained them into an escape. OpenAI will still ship it, but the hacking skills go only to vetted defenders.