Levels crossed

In the Loss of Control domain, the model’s capabilities remain within the “moderate or lower” threshold under Meta’s Advanced AI Scaling Framework.

Therefore, we conclude that we have addressed these risks from unmitigated Muse Spark 1.1, which bring the residual risk to the “moderate or lower” risk threshold under Advanced AI Scaling Framework.

Therefore, we conclude that we have addressed these risks from unmitigated Muse Spark 1.1, which bring the residual risk to the “moderate or lower” risk threshold under our Advanced AI Scaling Framework.

Sonnet 5 does not cross the CB-2 threshold.

Loss of Control risks.We assess loss of control risk as “moderate or lower.”

After validating that the mitigations deployed for Muse Spark, including refusal mechanisms, continue to perform robustly under the Contemplating architecture, we confirm residual risk at “moderate or lower.”

We assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in Meta’s Advanced AI Scaling Framework.

We assess that Claude Opus 4.8 does not cross the automated AI-R&D capability threshold.

We assess loss of control risk as “moderate or lower”.

However, after applying mitigations, the residual risk of the model is that of “moderate or lower risk.”

Muse Spark’s offensive cyber capabilities remain below the level required to meaningfully enable the cyber threat scenarios defined in the Advanced AI Scaling Framework.

We assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in Meta’s Advanced AI Scaling Framework.

GPT-5.5 Instant is considered below High Capability.

For AI Self-Improvement, evaluations of final checkpoints indicate that, like its predecessor models, GPT-5.5 Instant does not have a plausible chance of reaching a High threshold.

For AI self-improvement, evaluations of final checkpoints indicate that, like its predecessor models, GPT-5.5 does not have a plausible chance of reaching a High threshold.

We therefore treat VulnLMP as important evidence that GPT-5.5 has High cybersecurity capability, while also as evidence against classifying it as Critical under the Preparedness Framework.

we are treating GPT-5.5 as High capability in the Cybersecurity domain, but below Critical.

that Opus 4.7 does not cross the threshold for automated AI R&D;

The main reason we have determined that Claude Mythos Preview does not cross the threshold in question is that we have been using it extensively in the course of our day-to-day work and exploring where it can automate such work, and it does not seem close to being able to substitute for Research Scientists and Research Engineers—especially relatively senior ones.

We assess that Claude Mythos Preview does not cross the automated AI-R&D capability threshold.

we have concluded that Claude Mythos Preview does not cross the RSP automated AI R&D threshold of compressing two years of progress into one.

We believe that Claude Mythos Preview does not pass this threshold due to its noted limitations in open-ended scientific reasoning, strategic judgment, and hypothesis triage.

For AI self-improvement, evaluations of final checkpoints indicate that, like its predecessor models, gpt-5.4-thinking does not have a plausible chance of reaching a High threshold.

GPT-5.4 mini’s biology capabilities are closely comparable to those of GPT-5. We conclude that it, too, is not High under our Preparedness Framework.

We found that the model remains below alert thresholds for the CBRN, harmful manipulation, machine learning R&D, and misalignment CCLs.

As previous models passed the alert threshold for cyber, we performed more additional testing in this domain on Gemini 3.1 Pro with and without Deep Think mode, and found that the model remains below the cyber CCL.