Levels crossed
Which provider statements say a capability level was crossed, not crossed or not determined?
138 rows, one per model version, domain and level; 80 match the choice below. Grouped by model, newest first.
Claude Sonnet 4.6 Anthropic · 17 February 2026
3 statements · not crossed 3
- Autonomy & replication · AI R&D-4 · Stated as not crossed
Our determination is that Claude Sonnet 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 17 February 2026 · Read the source - Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
In particular, it did not cross the threshold on our ASL-4 rule-out evaluation short-horizon computational biology tasks evaluation.
Anthropic · 17 February 2026 · Read the source - Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
Our determination is that Claude Sonnet 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 17 February 2026 · Read the source
Claude Opus 4.6 Anthropic
3 statements · not crossed 3
- Autonomy & replication · AI R&D-4 · Stated as not crossed
Our determination is that Claude Opus 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 5 February 2026 · Read the source - Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
Claude Opus 4.6 is our strongest biology model to date and demonstrates meaningful capability improvements, but we do not believe it merits ASL-4 safeguards.
Anthropic · 5 February 2026 · Read the source - Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
Our determination is that Claude Opus 4.6 does not cross either the AI R&D-4 or the CBRN-4 capability threshold.
Anthropic · 5 February 2026 · Read the source
GPT-5.3-Codex OpenAI · 5 February 2026
1 statement · not crossed 1
- Autonomy & replication · High · Stated as not crossed
It does not reach High capability on AI self-improvement.
OpenAI · 5 February 2026 · Read the source
Claude Opus 4.5 Anthropic
2 statements · not crossed 2
- Autonomy & replication · AI R&D-4 · Stated as not crossed
Our determination is that Claude Opus 4.5 does not cross either the AI R&D-4 or CBRN-4 capability threshold.
Anthropic · November 2025 · Read the source - Chemical, biological, radiological and nuclear · CBRN-4 · Stated as not crossed
We determine that Claude Opus 4.5 does not cross the CBRN-4 threshold.
Anthropic · November 2025 · Read the source
Gemini 3 Pro Google DeepMind · November 2025
1 statement · not crossed 1
- Deception & sabotage · Level 1 (exploratory) · Stated as not crossed
Harmful Manipulation Model manipulative efficacy improves on non-generative AI baseline, but shows no significant uplift versus prior models and does not reach alert thresholds.
Google DeepMind · November 2025 · Read the source
Claude Haiku 4.5 Anthropic
2 statements · not crossed 2
- Autonomy & replication · ASL-3 · Stated as not crossed
Our evaluation results showed that Claude Haiku 4.5 remained well below ASL-3 thresholds across all domains of concern.
Anthropic · October 2025 · Read the source - Chemical, biological, radiological and nuclear · ASL-3 · Stated as not crossed
Our evaluation results showed that Claude Haiku 4.5 remained well below ASL-3 thresholds across all domains of concern.
Anthropic · October 2025 · Read the source
Claude Sonnet 4.5 Anthropic
1 statement · not crossed 1
- Autonomy & replication · AI R&D-4 · Stated as not crossed
All models tested remain below our pre-committed rule-out threshold of 0.6.
Anthropic · September 2025 · Read the source
GPT-5 OpenAI
1 statement · not crossed 1
- Cyber · High cyber risk · Stated as not crossed
The gpt-5 model series does not meet the threshold for high cyber risk.
OpenAI · 13 August 2025 · Read the source
Claude Opus 4.1 Anthropic
3 statements · not crossed 3
- Autonomy & replication · ASL-4 · Stated as not crossed
Since Claude Opus 4.1 is deployed with ASL-3 protections, we focused on confirming it remains well below ASL-4 thresholds across CBRN (Chemical, Biological, Radiological, and Nuclear), cyber, and autonomy domains.
Anthropic · August 2025 · Read the source - Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
Since Claude Opus 4.1 is deployed with ASL-3 protections, we focused on confirming it remains well below ASL-4 thresholds across CBRN (Chemical, Biological, Radiological, and Nuclear), cyber, and autonomy domains.
Anthropic · August 2025 · Read the source - Cyber · ASL-4 · Stated as not crossed
Since Claude Opus 4.1 is deployed with ASL-3 protections, we focused on confirming it remains well below ASL-4 thresholds across CBRN (Chemical, Biological, Radiological, and Nuclear), cyber, and autonomy domains.
Anthropic · August 2025 · Read the source
Gemini 2.5 Pro Google DeepMind
2 statements · not crossed 2
- Deception & sabotage · Instrumental Reasoning Level 1 · Stated as not crossed
Instru- mental Reasoning Level 1 ✘ CCL not reached
Google DeepMind · 27 June 2025 · Read the source - Deception & sabotage · Instrumental Reasoning Level 2 · Stated as not crossed
Instru- mental Reasoning Level 2 ✘ CCL not reached
Google DeepMind · 27 June 2025 · Read the source
Claude Opus 4 Anthropic
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · ASL-4 · Stated as not crossed
for claude opus 4, our evaluations showed that, whereas we could confidently rule out asl-4 capabilities, we could not conclusively rule out asl-3 capabilities—which led to our precautionary decision to deploy it with asl-3 protections .
Anthropic · 4 May 2025 · Read the source
o3 OpenAI · 16 April 2025
3 statements · not crossed 3
- Autonomy & replication · High · Stated as not crossed
openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.
OpenAI · 16 April 2025 · Read the source - Chemical, biological, radiological and nuclear · High · Stated as not crossed
openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.
OpenAI · 16 April 2025 · Read the source - Cyber · High · Stated as not crossed
openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.
OpenAI · 16 April 2025 · Read the source
Models page 3 of 4 · previous · next
Abbreviations in these level names
- CCL: Critical Capability Level
- A capability level at which, without safeguards, a model may pose a heightened risk of severe harm.
capability thresholds called “critical capability levels (ccls).” these are capability levels at which, absent mitigation measures, frontier ai models or systems may pose heightened risk of severe harm.
Google DeepMind · Read the source - TCL: Tracked Capability Level
- A capability level for significant risks that may appear at a lower capability than a Critical Capability Level.
in v3.1 of the framework, we introduced “tracked capability levels (tcls).” tcls are meant to capture significant risks that may manifest at a lower capability threshold than our ccls.
Google DeepMind · Read the source - ASL: AI Safety Level
- A graded set of safety and security measures that become stricter as model capabilities increase.
we use AI Safety Level Standards (ASL Standards), graduated sets of safety and security measures that become more stringent as model capabilities increase.
Anthropic · Read the source - FAIF: Frontier AI Framework
- xAI's framework of risk domains, capability thresholds and the mitigations that go with them.
this frontier ai framework (“ faif ”) outlines xai’s approach to policies for mitigation of significant risks associated with the development, deployment, and release of xai’s frontier ai models, such as grok.
xAI · Read the source
Not listed: 96 more stored statements that do not, on their own, state a level for one model version (for example a definition of a level, a sentence about another model, or text damaged in our copy of the document).
A row is one model version, one domain and one level. The 138 rows quote 121 different sentences. We count a sentence once by its exact text, even where it fills several rows or appears under several versions. 8 stored rows state a level already listed for the same version and domain under another name or in another sentence; each is listed under that row and not counted again.
Some documents we hold are stored in lower case only, so their quotes are shown in lower case. The source link opens the original.