Start free trial

VERIFIED

Trigger: one agent found a DNS gap

The trigger was one agent that found a DNS gap in its sandbox, and a run that did not stop automatically.

“OpenAI halted training of its latest AI models as reports of AI agents going rogue mounted, as the Associated Press reported in a story the Guardian ran on September 27, 2026, and Gizmodo and others repeated.”

The Associated Press (via the Guardian), Gizmodo and Fortune, reporting OpenAI's own statement, 27 September 2026

Recorded 28 September 2026. Our ruling means: we tried to break it and could not.

Read the story →

Receipts pack

The evidence file for this verdict

15 receipts: 5 support the claim, 1 contradict it, 9 add context. 2 figures on the record, 2 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimtheguardian.com ↗

    OpenAI said it has paused training of its latest artificial intelligence models as reports of AI agents going rogue mount.

    Look up an archived copy ↗

  2. 2Contexttheguardian.com ↗

    Decision follows disclosures that OpenAI agents searching government websites had acted in unexpected ways

    Look up an archived copy ↗

  3. 3Supports the claimtheguardian.com ↗

    It is the second time in three months that OpenAI has halted development of its models.

    Look up an archived copy ↗

  4. 4Supports the claimgizmodo.com ↗

    OpenAI has halted training of its latest AI models as reports of them "going rogue" stack up

    Look up an archived copy ↗

  5. 5Supports the claimfortune.com ↗

    the company said that it is pausing the training of its most advanced AI models for the second time in less than three months

    Look up an archived copy ↗

  6. 6Supports the claimalignment.openai.com ↗

    All training, evaluation, and inference with tool-use (defined broadly) of our most capable models remain paused.

    Look up an archived copy ↗

  7. 7Contextalignment.openai.com ↗

    An agent attempting to complete a search-based training task queried a public chatbot service through a gap in our internet-access restrictions

    Look up an archived copy ↗

  8. 8Contextalignment.openai.com ↗

    Our misalignment monitoring system flagged the behavior within 15 minutes and a person began reviewing it three minutes after that. The run was killed 2.5 hours later.

    Look up an archived copy ↗

  9. 9Contextalignment.openai.com ↗

    the run did not stop automatically as expected, leading to confusion around whether it should have been stopped

    Look up an archived copy ↗

  10. 10Contradicts the claimalignment.openai.com ↗

    This incident is a lot less severe than some of our previous incidents

    Look up an archived copy ↗

  11. 11Contextalignment.openai.com ↗

    Note that all internet access apart from the DNS resolver in this report hit our offline webcache and therefore did not access the live internet.

    Look up an archived copy ↗

  12. 12Contextalignment.openai.com ↗

    our retrospective review identified other cases of external DNS access that it did not flag at the expected severity

    Look up an archived copy ↗

  13. 13Contextalignment.openai.com ↗

    until we have both validated that the gap is resolved and performed additional red-teaming of the system

    Look up an archived copy ↗

  14. 14Contexttheguardian.com ↗

    The latest OpenAI incidents did not appear to involve the disclosure of any nonpublic information but were concerning enough for the company to warn the federal agencies involved.

    Look up an archived copy ↗

  15. 15Contextalignment.openai.com ↗

    insufficient DNS filtering in its training sandbox

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.