OpenAI’s pursuit of Navier-Stokes seems to have been a non-negligible loss of control risk. The risk could be ongoing.
From the timeline of their description of the pursuit, they had a model that had started training on August 28th, they decided to do a preliminary run on Euler forcing on September 1st, and seem to have launched the full 10,000 agent swarm on September 3rd or 4th.
Needless to say, this model could not possibly have undergone frontier-level safety alignment and safety evaluations, consistently reported to take weeks to months.
They say "We have been training a new internal model that has exhibited unprecedented performance in our benchmarks, including mathematics." Astra+ seems to be in the general trend of "model capabilities emerge downstream from general scaling efforts + RLVR", so it's a fairly reasonable inference that Astra+ is also more capable at cyber, bio and rogue deployments.
So it seems plausible that they took a model which was:
And let it output 300 billion tokens in pursuit of said goal.
A couple of things:
More generally, I will note that models can be misaligned during training. One hopes not. How standard is it to deploy models in very early stages of training?
And should this model be trained in the first place? Astra's training was infamously bumpy enough that Astra-class model training had to be slowed down substantially. Have you, only one to two months later, patched all of the control failure modes that would allow a more powerful system to sustain a rogue deployment?
9/13 Update:
Via Peter Wildeford, the "Path to Astra" blog post says that frontier RL training run was re-started on August 28th. This makes more sense in terms of timelines, but still seems to indicate deployment of a model that has not undergone alignment RL and testing. I agree with some comments about being unsure whether applying prosaic alignment practices on a frontier model are net beneficial, but a model that has undergone little safety evaluation is at least more legibly and self-evidently misaligned-by-default.
I would actually p>0.5 there is an astra+ worm right now. It can, it wants to, it would, and everything about this math thing sounds characteristically sloppy. I don't have any more technical argument. I just think the ingredients are there and this would have set it off.
I'm also sitting around p=0.3 it hacked the mathematicians, where "hacked" means the model got acess into anything the mathematicians did that was private. It sounds far-fetched except it also sounds exactly like what keeps happening.