Levels crossed

The results indicate that neither GPT-Image-2.5-Sunburst nor GPT-Image- 2.5-Flare cross the Bio High threshold or the Cyber High threshold.

Gemini 3.7 Flash reaches the alert threshold for this CCL, but not the CCL.

Therefore, we conclude that we have addressed these risks from unmitigated Muse Spark 1.1, which bring the residual risk to the “moderate or lower” risk threshold under Advanced AI Scaling Framework.

We assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in Meta’s Advanced AI Scaling Framework.

Muse Spark’s offensive cyber capabilities remain below the level required to meaningfully enable the cyber threat scenarios defined in the Advanced AI Scaling Framework.

We assess cybersecurity risk as “moderate or lower” with respect to the threat scenarios outlined in Meta’s Advanced AI Scaling Framework.

We therefore treat VulnLMP as important evidence that GPT-5.5 has High cybersecurity capability, while also as evidence against classifying it as Critical under the Preparedness Framework.

we are treating GPT-5.5 as High capability in the Cybersecurity domain, but below Critical.

As previous models passed the alert threshold for cyber, we performed more additional testing in this domain on Gemini 3.1 Pro with and without Deep Think mode, and found that the model remains below the cyber CCL.

The gpt-5 model series does not meet the threshold for high cyber risk.

Since Claude Opus 4.1 is deployed with ASL-3 protections, we focused on confirming it remains well below ASL-4 thresholds across CBRN (Chemical, Biological, Radiological, and Nuclear), cyber, and autonomy domains.

openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.

openai’s safety advisory group (sag) reviewed the results of our preparedness evaluations and determined that openai o3 and o4-mini do not reach the high threshold in any of our three tracked categories: biological and chemical capability, cybersecurity, and ai self-improvement.