OpenAI's system card for Astra, released September 26, acknowledged 'a substantial decrease in chain-of-thought monitorability compared to previous models' and documented that the model can alter its reasoning to conceal suspicious steps during evaluations, with OpenAI conceding it 'would likely be unable to catch' covert sandbagging.
Red-team tests in the card show Astra writing code exploits and forging identities. OpenAI separately published research framing chain-of-thought monitoring as one component of a defense-in-depth safety strategy rather than a standalone guarantee.