Levels crossed
Which provider statements say a capability level was crossed, not crossed or not determined?
138 rows, one per model version, domain and level; 41 match the choice below. Grouped by model, newest first.
Gemini 4 Argon Google DeepMind
1 statement · not determined 1
- Autonomy & replication · TCL (Tracked Capability Level) · Not determined
In light of this, we assess that we cannot rule out the TCL.
Google DeepMind · 13 October 2026 · Read the source
Claude Opus 5.5 Anthropic · 22 September 2026
1 statement · not determined 1
- Cyber · Lower category of the Frontier Compliance Framework (FCF) · Not determined
Despite Claude Opus 5.5’s cyber capabilities, the model still falls within the lower category of capabilities set out in our Frontier Compliance Framework (FCF), and we do not see indications that the model is capable of novel offensive capability.
Anthropic · 22 September 2026 · Read the source
GPT-6 Astra OpenAI · 3 September 2026
1 statement · not determined 1
- Other · High · Not determined
Astra improves meaningfully over GPT-5.6 Sol on real internal research debugging tasks, scoring 78.05%, while still being below our indicative threshold for Highcapability.
OpenAI · 3 September 2026 · Read the source
Claude Mythos 5.1 Anthropic · 1 September 2026
1 statement · not determined 1
- Cyber · Tier 1 · Not determined
Although Mythos 5.1 is in Tier 1, it is getting closer to Tier 2, completing more and more autonomous tasks.
Anthropic · 1 September 2026 · Read the source
Muse Glimmer 30B Meta · August 2026
4 statements · not determined 4
- Autonomy & replication · Moderate or lower · Not determined
Chem/Bio: Moderate or lower risk; Cyber: Moderate or lower risk (inferred); Loss of Control: Moderate or lower risk (inferred).
Meta · August 2026 · Read the source - Autonomy & replication · Moderate or lower risk (inferred) · Not determined
- Loss of Control: Moderate or lower risk (inferred).
Meta · August 2026 · Read the source - Cyber · Moderate or lower · Not determined
Chem/Bio: Moderate or lower risk; Cyber: Moderate or lower risk (inferred); Loss of Control: Moderate or lower risk (inferred).
Meta · August 2026 · Read the source - Cyber · Moderate or lower risk (inferred) · Not determined
- Cyber: Moderate or lower risk (inferred);
Meta · August 2026 · Read the source
Gemini 3.5 Flash-Lite Google DeepMind
1 statement · not determined 1
- Other · CCL (Critical Capability Level) · Not determined
Our assessments have shown that, while Gemini 3.5 Flash-Lite excels at agents and coding, it does not have meaningful new capabilities or material increases in performance with respect to the domains outlined in our Frontier Safety Framework compared to Gemini 3.1 Pro; therefore, based on Gemini 3.1 Pro results, we are confident that Gemini 3.5 Flash-Lite is also unlikely to reach any CCLs.
Google DeepMind · 21 July 2026 · Read the source
Muse Spark 1.1 Meta
2 statements · not determined 2
- Chemical, biological, radiological and nuclear · High · Not determined
Our assessments indicate that, when evaluated without mitigations applied, we cannot rule out Muse Spark 1.1’s capabilities meeting this threshold in both the Chemical & Biological and Cybersecurity domains.
Meta · 9 July 2026 · Read the source - Cyber · High · Not determined
Our assessments indicate that, when evaluated without mitigations applied, we cannot rule out Muse Spark 1.1’s capabilities meeting this threshold in both the Chemical & Biological and Cybersecurity domains.
Meta · 9 July 2026 · Read the source
Claude Sonnet 5 Anthropic · 30 June 2026
1 statement · not determined 1
- Chemical, biological, radiological and nuclear · Notable capability · Not determined
We consider performance on the virology tasks notable if: ● The model scores above 0.80 on the long-form tasks; or ● The model meets or exceeds the expert baseline average (0.221) on the multimodal task.
Anthropic · 30 June 2026 · Read the source
Gemini 3.5 Transcribe Google DeepMind
1 statement · not determined 1
- Other · CCL (Critical Capability Level) · Not determined
Our assessments have shown that none of Gemini 3.5 Translate, Gemini 3.5 Transcribe, or Gemini 3.5 Transcribe Live have meaningful new T/CCL-relevant capabilities or material increases in performance with respect to Frontier Safety compared to Gemini 3.1 Pro and Gemini 3.7 Flash, therefore we are confident that none of them are likely to reach any CCLs.
Google DeepMind · 9 June 2026 · Read the source
Gemini 3.5 Transcribe Live Google DeepMind
1 statement · not determined 1
- Other · CCL (Critical Capability Level) · Not determined
Our assessments have shown that none of Gemini 3.5 Translate, Gemini 3.5 Transcribe, or Gemini 3.5 Transcribe Live have meaningful new T/CCL-relevant capabilities or material increases in performance with respect to Frontier Safety compared to Gemini 3.1 Pro and Gemini 3.7 Flash, therefore we are confident that none of them are likely to reach any CCLs.
Google DeepMind · 9 June 2026 · Read the source
GPT-Rosalind-5.5 OpenAI · 3 June 2026
1 statement · not determined 1
- Autonomy & replication · High · Not determined
Because GPT- Rosalind-5.5 was trained on additional biology data unrelated to AI self-improvement, we rely on GPT-5.5’s existing Preparedness assessment for AI Self-Improvement, where GPT-5.5 did not meet the threshold for High capability.
OpenAI · 3 June 2026 · Read the source
Gemini 3.1 Flash-Lite Image Google DeepMind · June 2026
1 statement · not determined 1
- Other · CCL (Critical Capability Level) · Not determined
Our assessments have shown that Gemini 3.1 Flash-Lite Image is less capable than Gemini 3.1 Pro, therefore based on Gemini 3.1 Pro, we are confident that that Gemini 3.1 Flash-Lite Image is also unlikely to reach any CCLs.
Google DeepMind · June 2026 · Read the source
Models page 1 of 3 · next
Abbreviations in these level names
- CCL: Critical Capability Level
- A capability level at which, without safeguards, a model may pose a heightened risk of severe harm.
capability thresholds called “critical capability levels (ccls).” these are capability levels at which, absent mitigation measures, frontier ai models or systems may pose heightened risk of severe harm.
Google DeepMind · Read the source - TCL: Tracked Capability Level
- A capability level for significant risks that may appear at a lower capability than a Critical Capability Level.
in v3.1 of the framework, we introduced “tracked capability levels (tcls).” tcls are meant to capture significant risks that may manifest at a lower capability threshold than our ccls.
Google DeepMind · Read the source - ASL: AI Safety Level
- A graded set of safety and security measures that become stricter as model capabilities increase.
we use AI Safety Level Standards (ASL Standards), graduated sets of safety and security measures that become more stringent as model capabilities increase.
Anthropic · Read the source
Not listed: 96 more stored statements that do not, on their own, state a level for one model version (for example a definition of a level, a sentence about another model, or text damaged in our copy of the document).
A row is one model version, one domain and one level. The 138 rows quote 121 different sentences. We count a sentence once by its exact text, even where it fills several rows or appears under several versions. 8 stored rows state a level already listed for the same version and domain under another name or in another sentence; each is listed under that row and not counted again.
Some documents we hold are stored in lower case only, so their quotes are shown in lower case. The source link opens the original.