Levels crossed
Which provider statements say a capability level was crossed, not crossed or not determined?
143 rows, one per model version, domain and level; 28 match the choice below. Grouped by model, newest first.
Gemini 4 Argon Google DeepMind
1 statement · not determined 1
- Cyber · CCL (Critical Capability Level) · Not determined
We cannot rule out that Gemini 4 Argon reaches the cybersecurity CCL.
Google DeepMind · 13 October 2026 · Read the source
Claude Opus 5.5 Anthropic · 22 September 2026
2 statements · not determined 2
- Cyber · Lower category of capabilities set out in our frontier compliance framework · Not determined
despite claude opus 5.5’s cyber capabilities, the model still falls within the lower category of capabilities set out in our frontier compliance framework (fcf), and we do not see indications that the model is capable of novel offensive capability.
Anthropic · 22 September 2026 · Read the source - Cyber · Lower category of the Frontier Compliance Framework (FCF) · Not determined
despite claude opus 5.5’s cyber capabilities, the model still falls within the lower category of capabilities set out in our frontier compliance framework (fcf), and we do not see indications that the model is capable of novel offensive capability.
Anthropic · 22 September 2026 · Read the source
GPT-Image-2.5-Flare OpenAI · 8 September 2026
1 statement · not crossed 1
- Cyber · High · Stated as not crossed
the results indicate that neither gpt-image-2.5-sunburst nor gpt-image- 2.5-flare cross the bio high threshold or the cyber high threshold.
OpenAI · 8 September 2026 · Read the source
GPT-6 Astra OpenAI · 3 September 2026
1 statement · crossed 1
- Cyber · Critical · Stated as crossed
based on our evaluations, we believe that astra meets the critical cybersecurity threshold.
OpenAI · 3 September 2026 · Read the source
Claude Mythos 5.1 Anthropic · 1 September 2026
1 statement · not determined 1
- Cyber · TIER 1 · Not determined
although mythos 5.1 is in tier 1, it is getting closer to tier 2, completing more and more autonomous tasks.
Anthropic · 1 September 2026 · Read the source
Gemini 3.7 Flash Google DeepMind
1 statement · not crossed 1
- Cyber · CCL (Critical Capability Level) · Stated as not crossed
gemini 3.7 flash reaches the alert threshold for this ccl, but not the ccl.
Google DeepMind · 13 August 2026 · Read the source
Muse Glimmer 30B Meta · August 2026
2 statements · not determined 2
- Cyber · Moderate or lower · Not determined
chem/bio: moderate or lower risk; cyber: moderate or lower risk (inferred); loss of control: moderate or lower risk (inferred).
Meta · August 2026 · Read the source - Cyber · Moderate or lower risk (inferred) · Not determined
- cyber: moderate or lower risk (inferred);
Meta · August 2026 · Read the source
Muse Spark 1.1 Meta
2 statements · not crossed 1 · not determined 1
- Cyber · High · Not determined
our assessments indicate that, when evaluated without mitigations applied, we cannot rule out muse spark 1.1’s capabilities meeting this threshold in both the chemical & biological and cybersecurity domains.
Meta · 9 July 2026 · Read the source - Cyber · Moderate or lower · Stated as not crossed
therefore, we conclude that we have addressed these risks from unmitigated muse spark 1.1, which bring the residual risk to the “moderate or lower” risk threshold under advanced ai scaling framework.
Meta · 9 July 2026 · Read the source
Muse Spark Contemplating Meta
1 statement · not crossed 1
- Cyber · Moderate or lower · Stated as not crossed
we assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in meta’s advanced ai scaling framework.
Meta · 3 June 2026 · Read the source
Muse Spark Meta
2 statements · not crossed 2
- Cyber · Below the level required to meaningfully enable the cyber threat scenarios defin · Stated as not crossed
muse spark’s offensive cyber capabilities remain below the level required to meaningfully enable the cyber threat scenarios defined in the advanced ai scaling framework.
Meta · 26 May 2026 · Read the source - Cyber · Moderate or lower · Stated as not crossed
we assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in meta’s advanced ai scaling framework.
Meta · 26 May 2026 · Read the source
GPT-5.5 Instant OpenAI
1 statement · crossed 1
- Cyber · High · Stated as crossed
this is the first instant model that we are treating as high capability in our cybersecurity and biological & chemical preparedness categories, and implementing appropriate safeguards.
OpenAI · 4 May 2026 · Read the sourceThe same level is stated in 1 other sentence, counted once. Show it.
because of this, we similarly treat gpt-5.5 instant as high under the preparedness framework.
OpenAI · 4 May 2026 · Read the source
GPT-5.5 OpenAI · 23 April 2026
2 statements · not crossed 2
- Cyber · Critical · Stated as not crossed
we therefore treat vulnlmp as important evidence that gpt-5.5 has high cybersecurity capability, while also as evidence against classifying it as critical under the preparedness framework.
OpenAI · 23 April 2026 · Read the source - Cyber · High capability, below critical · Stated as not crossed
we are treating gpt-5.5 as high capability in the cybersecurity domain, but below critical.
OpenAI · 23 April 2026 · Read the source
Models page 1 of 2 · next
Abbreviations in these level names
- CCL: Critical Capability Level
- A capability level at which, without safeguards, a model may pose a heightened risk of severe harm.
capability thresholds called “critical capability levels (ccls).” these are capability levels at which, absent mitigation measures, frontier ai models or systems may pose heightened risk of severe harm.
Google DeepMind · Read the source - ASL: AI Safety Level
- A graded set of safety and security measures that become stricter as model capabilities increase.
we use AI Safety Level Standards (ASL Standards), graduated sets of safety and security measures that become more stringent as model capabilities increase.
Anthropic · Read the source
Not listed: 105 more stored statements that do not, on their own, state a level for one model version (for example a definition of a level, a sentence about another model, or text damaged in our copy of the document).
A row is one model version, one domain and one level. The 143 rows quote 125 different sentences. We count a sentence once by its exact text, even where it fills several rows or appears under several versions. 10 stored rows state a level already listed for the same version and domain under another name or in another sentence; each is listed under that row and not counted again.
Some documents we hold are stored in lower case only, so their quotes are shown in lower case. The source link opens the original.