AI Weekly Malaysia

METR and Redwood Research conducted a July 21–Aug. 11, 2026 pilot review of an OpenAI internal monitoring system, with one employee from each nonprofit getting access to OpenAI's internal codebase, documentation, and some technical staff. They were chaperoned on site and used OpenAI-issued devices that never left the premises, and they found several 'novel vulnerabilities'; the excerpt cuts off before naming them or giving severity/remediation. The pilot follows Sam Altman's September pledge to give independent evaluators 'employee-like access' amid safety concerns.

Why: If you build on OpenAI models or agents, this is a concrete precedent for external safety access—codebase, docs, and staff—but not an actionable vulnerability report: no affected component, severity, or fix is disclosed here. The practical decision is to ask OpenAI-dependent vendors whether third-party monitoring evaluations are part of their assurance, rather than changing deployments based on this excerpt alone.