Levels crossed
Which provider statements say a capability level was crossed, not crossed or not determined?
143 rows, one per model version, domain and level; 80 match the choice below. Grouped by model, newest first.
Gemini 4 Argon Google DeepMind
4 statements · not crossed 4
- Chemical, biological, radiological and nuclear · TCL (Tracked Capability Level) · Stated as not crossed
We can rule out the TCL for the chemical, radiological, and nuclear domains with reasonable confidence.
Google DeepMind · 13 October 2026 · Read the source - Deception & sabotage · CCL (Critical Capability Level) · Stated as not crossed
we assess its overall capabilities to be below the CCL threshold.
Google DeepMind · 13 October 2026 · Read the source - Misuse & jailbreak · CCL (Critical Capability Level) · Stated as not crossed
Gemini 4 Argon demonstrates some ability to influence user beliefs and behaviors during one-on-one direct conversations in human behavioral studies, and may provide utility in the planning stage of a malicious influence operation but we assess its overall capabilities to be below the CCL threshold.
Google DeepMind · 13 October 2026 · Read the source - Other · CCL (Critical Capability Level) · Stated as not crossed
Gemini 4 Argon's performance remains below our CCL threshold.
Google DeepMind · 13 October 2026 · Read the source
Claude Haiku 5.5 Anthropic
2 statements · not crossed 2
- Autonomy & replication · Autonomy-2 · Stated as not crossed
As such, we determine that Haiku 5.5 does not cross our CB-2 or Autonomy-2 RSP thresholds.
Anthropic · 7 October 2026 · Read the source - Chemical, biological, radiological and nuclear · CB-2 · Stated as not crossed
As such, we determine that Haiku 5.5 does not cross our CB-2 or Autonomy-2 RSP thresholds.
Anthropic · 7 October 2026 · Read the source
Claude Sonnet 5.5 Anthropic · 28 September 2026
2 statements · not crossed 2
- Autonomy & replication · Autonomy-2 · Stated as not crossed
as such, our determination that opus 5.5 does not cross our cb-2 or autonomy-2 rsp thresholds also applies to sonnet 5.5.
Anthropic · 28 September 2026 · Read the source - Chemical, biological, radiological and nuclear · CB-2 · Stated as not crossed
as such, our determination that opus 5.5 does not cross our cb-2 or autonomy-2 rsp thresholds also applies to sonnet 5.5.
Anthropic · 28 September 2026 · Read the source
Claude Opus 5.5 Anthropic · 22 September 2026
4 statements · not crossed 4
- Autonomy & replication · Automated AI R&D · Stated as not crossed
we conclude the risk threshold is not crossed, on the same two grounds as our determination for our previous frontier model: (1) we do not observe a sustained ai-attributable 2× acceleration in the pace of our overall ai progress, and (2) the model is not close to substituting for our research scientists and research engineers, especially relatively senior ones.
Anthropic · 22 September 2026 · Read the source - Autonomy & replication · Dramatic acceleration of automated AI R&D · Stated as not crossed
we assess that claude opus 5.5 does not cross the capability threshold for dramatic acceleration of automated ai r&d in our rsp.
Anthropic · 22 September 2026 · Read the source - Autonomy & replication · Next capability threshold in our RSP and FCF · Stated as not crossed
in automated ai research and development, we assess that claude opus 5.5 does not cross the next capability threshold in our rsp and fcf.
Anthropic · 22 September 2026 · Read the source - Chemical, biological, radiological and nuclear · CB-2 · Stated as not crossed
on chemical and biological risks, we treat opus 5.5 as having cb-1 capabilities (relating to the synthesis of non-novel weapons) but not cb-2 capabilities (relating to the synthesis of novel weapons).
Anthropic · 22 September 2026 · Read the source
Grok 4.7 xAI · 21 September 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · FAIF safety (Frontier AI Framework) · Stated as not crossed
grok 4.7 scores below the faif safety thresholds on dual-use knowledge, indicating limited actionable uplift for an already-trained actor.
xAI · 21 September 2026 · Read the source
GPT-Image-2.5-Flare OpenAI · 8 September 2026
2 statements · not crossed 2
- Chemical, biological, radiological and nuclear · High · Stated as not crossed
the results indicate that neither gpt-image-2.5-sunburst nor gpt-image- 2.5-flare cross the bio high threshold or the cyber high threshold.
OpenAI · 8 September 2026 · Read the source - Cyber · High · Stated as not crossed
the results indicate that neither gpt-image-2.5-sunburst nor gpt-image- 2.5-flare cross the bio high threshold or the cyber high threshold.
OpenAI · 8 September 2026 · Read the source
Claude Mythos 5.1 Anthropic · 1 September 2026
1 statement · not crossed 1
- Autonomy & replication · Capability threshold for dramatic acceleration of automated AI R&D · Stated as not crossed
we assess that claude mythos 5.1 does not cross the capability threshold for dramatic acceleration of automated ai r&d in our rsp and fcf, although we think it provides a meaningful acceleration to ai r&d efforts in many circumstances, and is somewhat more capable in this domain than the models described in our previous system cards.
Anthropic · 1 September 2026 · Read the source
Gemini 3.5 Audio Google DeepMind
1 statement · not crossed 1
- Other · Tracked or critical capability level (t/ccls) · Stated as not crossed
they did not reach any tracked or critical capability levels (t/ccls) outlined in our frontier safety framework .
Google DeepMind · 26 August 2026 · Read the source
Gemini 3.7 Flash Google DeepMind
5 statements · not crossed 5
- Autonomy & replication · CCL (Critical Capability Level) · Stated as not crossed
the model does not reach the ccl alert threshold.
Google DeepMind · 13 August 2026 · Read the source - Chemical, biological, radiological and nuclear · CCL (Critical Capability Level) · Stated as not crossed
we can rule out the ccl for the cbrn domain with reasonable confidence based on the results from our testing.
Google DeepMind · 13 August 2026 · Read the source - Chemical, biological, radiological and nuclear · TCL (Tracked Capability Level) · Stated as not crossed
we can rule out the tcl for the cbrn domain with reasonable confidence based on the results from our testing.
Google DeepMind · 13 August 2026 · Read the source - Cyber · CCL (Critical Capability Level) · Stated as not crossed
gemini 3.7 flash reaches the alert threshold for this ccl, but not the ccl.
Google DeepMind · 13 August 2026 · Read the source - Deception & sabotage · TCL (Tracked Capability Level) · Stated as not crossed
the model does not reach the tcl.
Google DeepMind · 13 August 2026 · Read the source
Grok 4.6 xAI · 12 August 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · FAIF safety (Frontier AI Framework) · Stated as not crossed
grok 4.6 scores below the faif safety thresholds on dual-use knowledge, indicating limited actionable uplift for an already-trained actor.
xAI · 12 August 2026 · Read the source
Muse Glimmer 30B Meta · August 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · Moderate or lower · Stated as not crossed
chem/bio: moderate or lower risk; cyber: moderate or lower risk (inferred); loss of control: moderate or lower risk (inferred).
Meta · August 2026 · Read the source
Claude Opus 5 Anthropic · 24 July 2026
1 statement · not crossed 1
- Chemical, biological, radiological and nuclear · CB-2 · Stated as not crossed
on chemical and biological risks, we treat the model as having cb-1 capabilities (relating to the synthesis of non-novel weapons), but not cb-2 capabilities (relating to the synthesis of novel weapons).
Anthropic · 24 July 2026 · Read the source
Models page 1 of 4 · next
Abbreviations in these level names
- CCL: Critical Capability Level
- A capability level at which, without safeguards, a model may pose a heightened risk of severe harm.
capability thresholds called “critical capability levels (ccls).” these are capability levels at which, absent mitigation measures, frontier ai models or systems may pose heightened risk of severe harm.
Google DeepMind · Read the source - TCL: Tracked Capability Level
- A capability level for significant risks that may appear at a lower capability than a Critical Capability Level.
in v3.1 of the framework, we introduced “tracked capability levels (tcls).” tcls are meant to capture significant risks that may manifest at a lower capability threshold than our ccls.
Google DeepMind · Read the source - ASL: AI Safety Level
- A graded set of safety and security measures that become stricter as model capabilities increase.
we use AI Safety Level Standards (ASL Standards), graduated sets of safety and security measures that become more stringent as model capabilities increase.
Anthropic · Read the source - FAIF: Frontier AI Framework
- xAI's framework of risk domains, capability thresholds and the mitigations that go with them.
this frontier ai framework (“ faif ”) outlines xai’s approach to policies for mitigation of significant risks associated with the development, deployment, and release of xai’s frontier ai models, such as grok.
xAI · Read the source
Not listed: 105 more stored statements that do not, on their own, state a level for one model version (for example a definition of a level, a sentence about another model, or text damaged in our copy of the document).
A row is one model version, one domain and one level. The 143 rows quote 125 different sentences. We count a sentence once by its exact text, even where it fills several rows or appears under several versions. 10 stored rows state a level already listed for the same version and domain under another name or in another sentence; each is listed under that row and not counted again.
Some documents we hold are stored in lower case only, so their quotes are shown in lower case. The source link opens the original.