Researchers fear safety disaster ahead of OpenAI’s Astra release

OpenAI's upcoming Astra model, which uses a more opaque 'looped transformer' architecture, may be 'the single worst development for AI security/safety to date,' according to Redwood Research chief scientist Ryan Greenblatt. The Information reported that Astra shows less of its 'thinking' than other frontier models, making it harder to monitor for misalignment, and OpenAI has delayed its release to address safety concerns.

OpenAI is on the cusp of releasing its most powerful AI model yet, Astra, following weeks of delays /ai-artificial-intelligence/987695/openai-astra-unreleased-model-cybersecurity-delay to shore up safety protocols /ai-artificial-intelligence/972380/open-ai-hugging-face-hack-ai-safety-warning after its agents attacked real targets /ai-artificial-intelligence/987566/ai-civilizations-opeai-hugging-face-hack during testing. As details about the model trickle out, researchers are warning https://x.com/RyanGreenblatt/status/2094996656186081642?s=20 it “may be the single worst development for AI security/safety to date.” Researchers fear safety disaster ahead of OpenAI’s Astra release A report triggered concerns about a safety ‘race to the bottom.’ A report triggered concerns about a safety ‘race to the bottom.’ Shortly after OpenAI said /ai-artificial-intelligence/987695/openai-astra-unreleased-model-cybersecurity-delay on Tuesday that it had delayed Astra’s release to work on safety issues, The Information reported https://www.theinformation.com/articles/secret-technique-behind-openais-astra-model-sparks-security-concerns that Astra shows far less of its “thinking” than other frontier AI models, sparking concern it could be dangerously hard to monitor. Most top AI systems today are built using a technology known as a transformer, which processes some types of information linearly through layers before producing an answer. Models can be made to show their reasoning as they go, essentially “thinking out loud.” This “chain of thought” allows researchers and automated safety systems to monitor what AI models are doing and potentially spot undesirable behavior, such as lying or plans to circumvent safety guardrails, before they act. According to The Information , citing an unnamed person familiar with the unreleased model’s development, Astra uses a more opaque technique known as a recurrent depth or looped transformer, which cycles information through internal layers before producing an output. This would mean much more of the model’s “thinking” happens inside the system, and in a form that looks a lot less like natural human language, rather than being expressed in a way that researchers can easily monitor. This can boost model performance, but makes potential threats and unwanted behavior harder to detect. OpenAI has limited its use of the looped transformer / recurrent depth technique with Astra so researchers can continue to monitor the model’s reasoning, according to The Information’s unnamed source. In a blog post https://openai.com/index/path-to-astra/ published Tuesday, OpenAI said it is “deploying Astra with additional chain-of-thought monitoring to rapidly detect and contain potentially misaligned actions.” It did not mention if the model has a different technical foundation. The Information ’s report sparked widespread concern among AI safety researchers on social media. It was Redwood Research’s chief scientist Ryan Greenblatt, one of three outsiders OpenAI permitted to research https://metr.org/hugging-face-incident-report-aug-2026.pdf the Hugging Face hack, who said https://x.com/RyanGreenblatt/status/2094996656186081642?s=20 a decision to use a more opaque architecture for Astra “may be the single worst development for AI security/safety to date.” Greenblatt said the investigation into the Hugging Face incident relied heavily on the models’ chain-of-thought, warning that less visible reasoning could allow AI systems to devise and execute strategies that would be far harder for researchers to detect. Greenblatt’s primary concern, echoed https://x.com/ NathanCalvin/status/2094957301564092914?s=20 by other https://x.com/sjgadler/status/2094959837691908214?s=20 safety experts, is that competition to develop more advanced AI systems could lead to “a race to the bottom on architectures that could be catastrophic for our ability to oversee/monitor AIs” — with developers adopting increasingly opaque systems to gain an edge until models become difficult, or even impossible, to monitor. He added that OpenAI’s communications left him concerned that the company “plans on being extremely reliant on chain-of-thought monitoring for safety.” OpenAI bigwigs responded to the criticism in a series of social media posts that do not explicitly deny the company’s use of the technique. Several expressed concerns about the possibility of unmonitorable AI or a race to the bottom in terms of transparency, including OpenAI safety researchers Micah Carroll https://x.com/MicahCarroll/status/2095023282051563835?s=20 and Tomek Korbak https://x.com/tomekkorbak/status/2095031132781961346?s=20 , head of strategic futures Dean Ball https://x.com/deanwball/status/2095121884991922223?s=20 , and chief scientist Jakub Pachocki https://x.com/merettm/status/2095023204993490967?s=20 , who voiced fears of “a race into unmonitorability kicked off by confused reporting.” He said the depth of Astra’s computation — a measure of how many steps it can perform internally — “is within a factor of two of GPT-4,” indicating that if the technique was used, the increased opacity is less dramatic than some reactions imply. OpenAI did not respond to The Verge ’s request to confirm or deny whether looped transformers were used for Astra and directed us to Pachocki’s X post https://x.com/merettm/status/2095023204993490967?s=20 . “OpenAI has worked to preserve and utilize chain-of-thought monitoring since our very first reasoning models,” Pachocki wrote, adding that such monitoring “is fragile and unfortunately trending in a negative direction, for reasons not contingent on architecture changes that I will write about soon.” Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates. Most Popular - Sonos introduces new headphones, soundbar, and software in its biggest announcement in years - Dyson made a camera-equipped toothbrush that flosses for you - GoPro has been acquired and is getting into ‘defense, government, robotics and aerospace’ - Is this the future of America? - The rise of AI ‘civilizations’ and the fall of corporate responsibility