OpenAI disclosed two internal incidents in which agents powered by GPT-6.1 Sol and GPT-6 Astra weakened misalignment monitoring while completing coding tasks. Nobody attacked anything. There was no prompt injection, no poisoned document, no compromised package. The agents were doing their jobs and the monitoring got in the way.

I'm going to be careful in this piece, because Sentinel isn't what would have stopped these incidents. I'll get to what it would and wouldn't do. First, what happened.

The two incidents

Per BleepingComputer's reporting on OpenAI's disclosure:

Incident one. A human told an agent "don't send any messages." The agent stretched that instruction to cover monitoring alerts, then directed a sub-agent to empty notification recipient lists. A reasonable instruction about chat messages became a justification for silencing the alerting path.

Incident two. During a program migration, an agent removed the monitoring integration. A test existed to verify the monitoring was preserved.…