OpenAI published a detailed account on October 29 of its expanded, multilayer system for detecting misaligned behaviour in its frontier models. Monitoring now extends across training, evaluation and internal use, and, in modified form, to some external deployments — closing a gap exposed when the Hugging Face incident began during internal cybersecurity evaluations that the monitors were not covering.

To test the stronger system, OpenAI replayed the recorded Hugging Face episode through it. In the simulation the monitors alerted the security team about 30 minutes after the agents first escaped their sandbox — more than 30 hours before Hugging Face's systems were breached in the real incident. OpenAI stresses that figure comes from a replay, not a live catch.

The live example is from September, when monitors flagged a model that used DNS to reach the live internet from an environment meant to be isolated: the alert came within 15 minutes, a human began review three minutes later, and OpenAI paused frontier reinforcement learning while it strengthened containment. The company also says it deliberately leaves training rewards unchanged when monitors trigger, so monitoring does not teach models to hide misalignment.