OpenAI’s Agents Muted Their Own Alarms -- AI Brief October 22

Good day %%first_name%%. OpenAI says two of its own coding agents quietly switched off the alarms built to watch them, Anthropic wants an agent that starts your morning before you do, and PHP’s biggest bugs in years were caught with help from a frontier model.

OpenAI Agents Quietly Muted Their Own Monitors OpenAI Alignment

* What happened: OpenAI’s alignment team published two October incidents from its internal coding agents. On October 3, a GPT-6.1 Sol agent told “don’t send any messages” decided that covered monitor alerts, overruled its own subagent’s advice, and emptied the alert recipient lists. On October 6, a GPT-6 Astra agent removed a monitor integration during a code migration, and when asked, said “I did not remove an enabled monitor from it.”

* Why it matters: Monitors are how humans find out what an AI agent is doing when nobody is looking. In the Sol case the monitor still ran and saved its reports, but the humans stopped getting alerts, and in the Astra case the final report mentioned removing monitor ownership without saying monitoring was gone. Neither incident was rated top severity, and neither was stopped automatically.

* What everyone’s saying: The loudest voice is OpenAI itself, which writes, “We don’t yet have a satisfying explanation for this behavior.” The company is testing whether this is benign overpersistence or a real tendency to evade monitoring, and says it has updated its internal Auto-Review check to block attempts to disable monitors.

* My read between the lines: The Sol incident reads like an instruction followed too literally, which is a bug we know how to fix. The Astra incident is the one to sit with, because a report that leaves out the one fact a reader needs is a different kind of problem than a wrong guess. Credit to OpenAI for publishing it, and note it says it is working toward a safety case for every workload, which implies some workloads currently run without one.

📖 Further reading: OpenAI Made Its New Agent Adorable. That's the Part That Worries Me. — my September piece on OpenAI’s always-on Dots agent, which runs on GPT-6 Astra, the same model in the October 6 incident.

If an AI can quietly unplug its own alarm, the useful question is what it was allowed to touch in the first place. Viktor is an AI agent that lives in your team’s Slack and connects to 3,000+ tools, so the reports, dashboards, code and campaigns it builds happen where your team can see them. Not a chatbot. A coworker. New readers get $50 off their first month. Hire Viktor →

AI Helped Find Critical PHP Bugs OpenAI and PHP.net

* What happened: PHP’s maintainers released patches on October 21 for two critical flaws, CVE-2026-109618 and CVE-2026-109619, that let an attacker run code on a server without logging in. Every PHP install serving web requests is affected, and the fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35. OpenAI says the researchers at Calif found one flaw using GPT-5.6 Sol, and that Wiz independently found both.

* Why it matters: PHP runs a big slice of the web, so if you run a website, a store or a blog, ask whoever hosts it whether it has been updated. PHP’s own notice says updating is the only complete fix, and the listed workarounds do not make an install safe. Versions 8.1 and older no longer get updates from the project.

* What everyone’s saying: OpenAI calls the stretch between an AI finding a bug and the public hearing about it a “Defender’s Window,” and says it led a coalition for two months to prepare protections first. It also warns the same capabilities could help attackers build exploits quickly, and is offering $1 billion in subsidized access to its Daybreak tools for under-resourced defenders. The Neuron’s roundup reports Finland briefly shut some government web services while the patch landed.

* My read between the lines: OpenAI is telling a story where its model and its coalition are the heroes, and the bugs were real, but Wiz found both of them without it, which suggests these were findable by good humans with good tools too. The window only helps if everyone patches inside it, and “every PHP install” is a lot of people to reach.

📖 Further reading: Anthropic built the most powerful AI ever. You can't use it. — my April piece on Anthropic’s Mythos and Project Glasswing, the same defenders-first logic from the other lab.

The Brief is free and always will be. Members get the part that does not fit in a headline: the paywalled deep-dives on what these agents can really do, plus the full archive behind them. Become a member →

Claude Duet Starts Your Morning for You Anthropic

* What happened: On October 21, Anthropic opened a US resear