AI Safety

The Trump administration has instructed OpenAI to release its newest model, GPT-5.6, only to a select group of government-approved partners rather than the general public. The Office of the National Cyber Director and Office of Science and Technology Policy will approve access customer by customer during a preview period.

Amazon Web Services launched the InvokeGuardrailChecks API for Amazon Bedrock Guardrails, enabling developers to apply individual safety checks at any point in agentic AI applications without provisioning guardrail resources. The API operates in detect-only mode and returns numeric scores (0-1 scale) for each safeguard, allowing developers to define custom thresholds and actions in their application logic.

Microsoft released ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing), an open-source framework that converts natural language descriptions of expected AI behavior into structured test cases. The tool addresses a gap in AI evaluation by testing application-specific behaviors that general benchmarks cannot capture.

A month after its initial release, a newer checkpoint of Anthropic's Mythos Preview became the first model to complete the UK AI Safety Institute's 'Cooling Tower' cyber range, solving it in 3 of 10 attempts. The model also completed 'The Last Ones' range in 6 of 10 attempts, surpassing OpenAI's GPT-5.5 and demonstrating capability improvements within a single model version.

OpenAI is providing a less-restricted version of GPT-5.5 to vetted cybersecurity defenders through its Trusted Access for Cyber program. The model, dubbed GPT-5.5-Cyber, completed a 32-step simulated corporate cyberattack in 2 out of 10 test runs according to the U.K. AI Security Institute, narrowly trailing Anthropic's Mythos which succeeded in 3 out of 10 attempts.

Anthropic is restricting access to Claude Mythos Preview, a model the company claims can find security vulnerabilities better than most humans, to 52 technology partners. While the UK's AI Security Institute has already tested Mythos and published findings, most European cybersecurity agencies have limited or no access, revealing a structural gap in Europe's AI safety evaluation capacity.