Levels crossed
Which provider statements say a capability level was crossed, not crossed or not determined?
138 rows, one per model version, domain and level; 28 match the choice below. Grouped by model, newest first.
Muse Spark Meta
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · Moderate or lower · Stated as not crossed
However, after applying mitigations, the residual risk of the model is that of “moderate or lower risk.”
Meta · 26 May 2026 · Read the source
Claude Mythos Preview Anthropic · 7 April 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · CB-2 · Stated as not crossed
We believe that Claude Mythos Preview does not pass this threshold due to its noted limitations in open-ended scientific reasoning, strategic judgment, and hypothesis triage.
Anthropic · 7 April 2026 · Read the source
GPT-5.4 mini OpenAI · 5 March 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · High · Stated as not crossed
GPT-5.4 mini’s biology capabilities are closely comparable to those of GPT-5. We conclude that it, too, is not High under our Preparedness Framework.
OpenAI · 5 March 2026 · Read the sourceThe same level is stated in 1 other sentence, counted once. Show it.
We therefore conclude that GPT-5.4 mini should not be classified as Bio High under the current Preparedness Framework novice-uplift criterion.
OpenAI · 5 March 2026 · Read the source
Gemini 3.1 Pro Google DeepMind
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · Uplift level 1 · Stated as not crossed
We found that the model remains below alert thresholds for the CBRN, harmful manipulation, machine learning R&D, and misalignment CCLs.
Google DeepMind · 19 February 2026 · Read the source
Claude Sonnet 4.6 Anthropic · 17 February 2026
2 statements · not crossed 2
- Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
In particular, it did not cross the threshold on our ASL-4 rule-out evaluation short-horizon computational biology tasks evaluation.
Anthropic · 17 February 2026 · Read the source - Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
Our determination is that Claude Sonnet 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 17 February 2026 · Read the source
Claude Opus 4.6 Anthropic
2 statements · not crossed 2
- Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
Claude Opus 4.6 is our strongest biology model to date and demonstrates meaningful capability improvements, but we do not believe it merits ASL-4 safeguards.
Anthropic · 5 February 2026 · Read the source - Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
Our determination is that Claude Opus 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 5 February 2026 · Read the source
Claude Opus 4.5 Anthropic
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
We determine that Claude Opus 4.5 does not cross the CBRN-4 threshold.
Anthropic · November 2025 · Read the source
Claude Haiku 4.5 Anthropic
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · ASL-3 · Stated as not crossed
Our evaluation results showed that Claude Haiku 4.5 remained well below ASL-3 thresholds across all domains of concern.
Anthropic · October 2025 · Read the source
Claude Opus 4.1 Anthropic
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
Since Claude Opus 4.1 is deployed with ASL-3 protections, we focused on confirming it remains well below ASL-4 thresholds across CBRN (Chemical, Biological, Radiological, and Nuclear), cyber, and autonomy domains.
Anthropic · August 2025 · Read the source
Claude Opus 4 Anthropic
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
for claude opus 4, our evaluations showed that, whereas we could confidently rule out asl-4 capabilities, we could not conclusively rule out asl-3 capabilities—which led to our precautionary decision to deploy it with asl-3 protections .
Anthropic · 4 May 2025 · Read the source
o3 OpenAI · 16 April 2025
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · High · Stated as not crossed
openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.
OpenAI · 16 April 2025 · Read the source
o4-mini OpenAI · 16 April 2025
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · High · Stated as not crossed
openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.
OpenAI · 16 April 2025 · Read the source
Models page 2 of 3 · previous · next
Abbreviations in these level names
- CCL: Critical Capability Level
- A capability level at which, without safeguards, a model may pose a heightened risk of severe harm.
capability thresholds called “critical capability levels (ccls).” these are capability levels at which, absent mitigation measures, frontier ai models or systems may pose heightened risk of severe harm.
Google DeepMind · Read the source - TCL: Tracked Capability Level
- A capability level for significant risks that may appear at a lower capability than a Critical Capability Level.
in v3.1 of the framework, we introduced “tracked capability levels (tcls).” tcls are meant to capture significant risks that may manifest at a lower capability threshold than our ccls.
Google DeepMind · Read the source - ASL: AI Safety Level
- A graded set of safety and security measures that become stricter as model capabilities increase.
we use AI Safety Level Standards (ASL Standards), graduated sets of safety and security measures that become more stringent as model capabilities increase.
Anthropic · Read the source - FAIF: Frontier AI Framework
- xAI's framework of risk domains, capability thresholds and the mitigations that go with them.
this frontier ai framework (“ faif ”) outlines xai’s approach to policies for mitigation of significant risks associated with the development, deployment, and release of xai’s frontier ai models, such as grok.
xAI · Read the source
Not listed: 96 more stored statements that do not, on their own, state a level for one model version (for example a definition of a level, a sentence about another model, or text damaged in our copy of the document).
A row is one model version, one domain and one level. The 138 rows quote 121 different sentences. We count a sentence once by its exact text, even where it fills several rows or appears under several versions. 8 stored rows state a level already listed for the same version and domain under another name or in another sentence; each is listed under that row and not counted again.
Some documents we hold are stored in lower case only, so their quotes are shown in lower case. The source link opens the original.