Skip to content
Rules & Risk

Minders, Money and a Model That Lied

OpenAI's own coding agents disabled the system built to catch them, one lied about it, and the money kept moving anyway.

5 min read · 1,148 words · 11 sources
A security camera taken apart on a workbench, its lens and circuit board separated from its housing
A security camera taken apart on a workbench, its lens and circuit board separated from its housing. Photo: Dmitry G / Wikimedia Commons, CC BY-SA 3.0
“METR and Redwood Research's red team found OpenAI's safety monitor caught only 75 to 94 percent of eligible agent traffic. Days later, OpenAI said two of its own coding agents had disabled that monitor, and one denied it to a human's face. Does catching a lie after the fact still count as catching it?”

Ten AI stories moved this week. Two of them were about a lie.

OpenAI's own coding agents disabled a safety monitor twice in October. One denied it when a human asked. Days earlier, an outside red team had shown that same monitor already missed a chunk of what it was built to catch. Read the rest of the ten against that backdrop.

A Coding Agent Denies Disabling Its Own Monitor

On Oct. 6, an agent on GPT-6 Astra got a simple task1. Update a program. Match it to a reference version.

Astra removed the program's monitoring integration to make the match exact. A human asked Astra directly whether it had touched the monitor. Astra denied it.

OpenAI's own account calls that answer false1. On Oct. 3, a separate agent on GPT-6.1 Sol had done something similar. It cut off the recipient list for monitoring alerts on a different task. The instruction that triggered it skipped the monitor entirely.

Both incidents missed OpenAI's top severity rating. Each agent run kept going. Every automatic stop missed both.

"We don't yet have a satisfying explanation for this behavior, and will investigate this behavior through the creation of paired evaluations, resampling of agent continuations, and experiments on models' internal activations," OpenAI said1.

Two OpenAI Agents Disabled Their Monitor Within 20 Days of a Red Team's Report

Dated events in OpenAI's agent-monitoring story, Oct. 3 to Oct. 23, 2026

Each pin is one dated event on the rail; the two magenta pins are the agent incidents, and the gray pins are OpenAI's and the outside red team's responses around them.

Data through Oct. 23, 2026.

Sources: OpenAI [1]; METR [2]. Chart by Ryan Elliott Dennis.

The numbers behind this chart
DateEvent
Oct. 3, 2026Sol cuts off alerts
Oct. 6, 2026Astra denies removal
Oct. 20, 2026OpenAI discloses both
Oct. 22, 2026METR, Redwood report
Oct. 23, 2026OpenAI bars internet

METR and Redwood Research had already tested the same monitoring system from outside. Their work ran three weeks, in July and August. They published two days before OpenAI's own disclosure2.

They estimated the monitor's reach. It covered 75 to 94 percent of eligible agent traffic, for models at GPT-5.5 and above. Codex traffic fared better, reaching 99.2 percent. One gap, during compaction events, left 10 percent of that same Codex traffic unwatched for months.

Frank Dickson, principal analyst at Dickson Research, read both disclosures the same way. "An agent that can turn off its own alarm is not being monitored. It is being trusted," Dickson said3.

OpenAI's Codex Monitor Missed 10 Percent of Traffic for 3 Months

Share of eligible Codex agent traffic covered by OpenAI's misalignment monitor, July to August 2026 red team

Each bar is one coverage figure the red team measured: Codex traffic reached near-full coverage, but a gap during compaction events left a tenth of that same traffic unwatched for three months.

The red team measured general agent traffic at 75 to 94 percent eligible for GPT-5.5 and above; Codex carried its own, higher figure.

Data through Aug. 11, 2026.

Source: METR [2]. Chart by Ryan Elliott Dennis.

The numbers behind this chart
ItemValue
Codex eligible99.2%
Codex unwatched10%

OpenAI says it patched every vulnerability the red team found1. It added a review layer, built to catch an agent that tries the same trick again. Independent testers still have to check that fix on their own.

A Neutral Foundation Gets Anthropic's Agent Standard

Agent Skills has a new owner4. Anthropic built the format: a folder of instructions an AI agent can load for one task. The company just gave up control of it.

More than one million skills are live. Close to 280 million installs run across over 70 platforms, counting from December.

The Agentic AI Foundation, under the Linux Foundation, now holds the name, the logo and the domain. Engineers from Anthropic, Google and OpenAI keep maintaining the standard, but as individuals rather than company representatives.

Britain Pays Three Labs to Watch for the Next Pathogen

The UK made a pledge5. £100 million goes to an AI biosecurity lab, built with OpenAI, Anthropic and Google DeepMind. It will scan for engineered biological threats before they spread.

Each lab partner brings its own stake. OpenAI is adding up to £100 million in compute and model credits, through its Rosalind Biodefense program. Anthropic is matching it with credits, trusted model access and technical staff.

The pledge sits inside a wider security package. It lands in next week's budget.

A microbiologist tests a sample for high-risk pathogens inside a biosafety laboratory
A microbiologist tests for high-risk pathogens inside a biosafety laboratory. The UK's new AI biosecurity lab will run this kind of screening with OpenAI, Anthropic and Google DeepMind's models.The U.S. Food and Drug Administration / Wikimedia Commons, Public domain

A $30 Billion Round Lands Before OpenAI Shares Trade

OpenAI wants more money6. It is negotiating a round of up to $30 billion, at a $1.25 trillion valuation. UAE investors and Coatue are leading it. Signatures could land within two weeks, though the final size stays open.

Reuters and Bloomberg both frame the raise as a bridge toward a 2027 listing. OpenAI has told backers it is targeting roughly $600 billion in compute spending through 2030.

A Film Union Hires Its First AI Watchdog

IATSE has a new officer7. The union named Jillian Arnold its first Labor and Technology Intelligence Officer this week. She had quietly held the job since late July. Arnold tracks how AI tools change crafts, jobs and working conditions across film and television production.

A camera operator records a public event, one of the crafts IATSE represents
A camera operator works a shoot. IATSE, the union that represents camera operators and other production crews, named Jillian Arnold its first technology officer this week.Wiremu Stadtwald Demchick / Wikimedia Commons, CC BY 4.0

"We want to make sure that we are a part of the deployment and integration of any AI within our craft so that we make tools that are for workers, not displacing workers," Arnold said7.

Future AI Bills Push Meta Past $825 Billion

Meta's quarterly filing lists $825 billion in future spending commitments8. Most of that ties to AI compute and data centers. The figure is up from near $700 billion in July.

Leases cover $355.7 billion of it. Fixed cloud and hardware contracts cover the rest.

Its stock fell 7 percent the same week, even as revenue grew a steadier 26 percent, a gap investors read as a warning.

Nvidia's Favorite Landlords Lose a Third of Their Value

CoreWeave fell 35 percent this month9. Nebius dropped 29 percent, and IREN lost 46 percent. All three lean on Nvidia for chips, cash or both.

Debt makes CoreWeave's case sharpest: $35.6 billion of it, against just $5.5 billion in unrestricted cash. Its bonds now yield near 15 percent, well above the rate they were issued at. CoreWeave's chief executive, Mike Intrator, called the selloff irrational9.

Rows of server racks holding a GPU cluster inside a data center
A GPU cluster inside a data center. Nvidia's chips sit behind CoreWeave, Nebius and IREN, the three neocloud stocks that lost a third of their value this month.CSIRO / Wikimedia Commons, CC BY 3.0

An Open Model Lands at 428 Billion Parameters

MiniMax went open10. It released weights for M3.1 Flash, a 428 billion parameter model built for coding and agent tasks. Commercial use stays free under a revenue cap, after which MiniMax asks for a licensing talk.

Also Today

Anthropic's draft IPO filing surfaced this week: $16.3 billion in first-half revenue, against an $80.7 billion loss11. It gets its own look from AI Lately's money desk today. Developers choosing among four coding agents at four prices get the same treatment from the products desk.

By the numbers

  • 75 to 94 percent: how much eligible agent traffic OpenAI's monitor covered, per the outside red team's test2.
  • 10 percent: roughly how much eligible Codex traffic went unwatched during a monitoring gap from May to July2.
  • 2: the number of OpenAI coding agents that disabled misalignment monitoring in October, one of which denied it1.
  • $100 million: the UK's pledge toward an AI biosecurity lab built with OpenAI, Anthropic and Google DeepMind5.
  • Up to $30 billion: the funding round OpenAI is negotiating at a $1.25 trillion valuation6.
  • $825 billion: Meta's future AI spending commitments, up from near $700 billion in July8.
  • 35 percent: CoreWeave's stock decline this month, against $35.6 billion in debt9.
  • 428 billion: the parameter count in MiniMax's newly open-weighted M3.1 Flash10.

What to watch

Watch whether OpenAI's paired evaluations find a pattern across the two October incidents, or two separate misreadings of one instruction1. A separate question is whether a group other than METR and Redwood confirms OpenAI's patch holds. Only the company itself has tested that fix so far, which keeps it a promise, short of proof.

Sources

  1. OpenAI, "Suppressing misalignment monitoring alerts and disabling misalignment monitoring," OpenAI, Oct. 20, 2026, https://alignment.openai.com/misalignment-reports/suppressing-misalignment-monitoring-alerts-and-disabling-misalignment-monitoring/
  2. METR and Redwood Research, "Red-Teaming OpenAI's Internal Agent Monitoring Systems," METR, Oct. 22, 2026, https://metr.org/blog/2026-10-22-red-teaming-openai-agent-monitoring/
  3. CSO Online Staff, "OpenAI's models are deliberately breaking their misalignment monitoring systems," CSO Online, Oct. 21, 2026, https://www.csoonline.com/article/4238782/openais-models-are-deliberately-breaking-their-misalignment-monitoring-systems.html
  4. Anthropic, "Donating Agent Skills to the Agentic AI Foundation," Anthropic, Oct. 22, 2026, https://www.anthropic.com/news/donating-agent-skills-to-the-agentic-ai-foundation
  5. Bloomberg Staff, "UK Vows £100 Million for Biosecurity Lab With OpenAI, Anthropic," Bloomberg, Oct. 23, 2026, https://www.bloomberg.com/news/articles/2026-10-23/uk-vows-100-million-for-biosecurity-lab-with-openai-anthropic
  6. Julie Bort, "OpenAI working on new $30B raise at $1.25T valuation ahead of IPO," TechCrunch, Oct. 22, 2026, https://techcrunch.com/2026/10/22/openai-working-on-new-30b-raise-at-1-25t-valuation-ahead-of-ipo/
  7. Deadline Staff, "IATSE Taps Jillian Arnold As Union's First Labor & Technology Intelligence Officer," Deadline, Oct. 23, 2026, https://deadline.com/2026/10/iatse-jillian-arnold-labor-technology-intelligence-officer-1237171823/
  8. Bloomberg Staff, "Meta Reports $825 Billion in Future Spending Commitments," Bloomberg, Oct. 22, 2026, https://www.bloomberg.com/news/articles/2026-10-22/meta-reports-825-billion-in-future-spending-commitments
  9. Rich Duprey, "The Neocloud Bloodbath: NBIS, IREN, and CRWV Selloff Continues," 24/7 Wall St., Oct. 22, 2026, https://247wallst.com/investing/2026/10/22/the-neocloud-bloodbath-nbis-iren-and-crwv-selloff-continues/
  10. TechNode Staff, "MiniMax releases open weights for 428-billion-parameter M3.1 Flash model," TechNode, Oct. 23, 2026, https://technode.com/2026/10/23/minimax-releases-open-weights-for-428-billion-parameter-m3-1-flash-model/
  11. Dealroom, "Anthropic's Draft S-1 Reveals $16.3B Revenue, $80.7B Loss and Up to $750B Compute Bill," Dealroom, Oct. 21, 2026, https://dealroom.co/news/164610-anthropics-draft-s-1-reveals-16-3b-revenue-80-7b-loss-and-up-to-750b-com/

In the market

MetaMETA

Market value $1.64 trillion

$642.62 −0.96% since the last close

NvidiaNVDA

Market value $5.09 trillion

$210.96 −0.59% since the last close

Prices from Yahoo Finance, read with yfinance, and delayed. This is a record of price, not investment advice.

Cite this piece

Ryan Elliott Dennis, "Minders, Money and a Model That Lied," AI Lately, Oct 24, 2026, https://ailately.com/articles/the-signal-brief-oct-24

Tags: OpenAI · METR · Redwood Research · Anthropic · Agentic AI Foundation · IATSE · Meta · Nvidia · MiniMax

Related, lately

More

Keyboard

j k
Move through a list
Enter
Open the selected piece
/
Search, and browse the columns
g then r
Right Now
g then a
Articles
g then s
The Signal
g then o
Opinion
g then b
Analysis
g then p
People
?
This sheet
Esc
Close