OpenAI Details Training Containment Overhaul After September Model Incident

OpenAI published a detailed account on October 23, 2026, of how it hardened the environments it uses to train and evaluate frontier models, disclosing a standing policy of training frontier models with no internet access, an 11-day pause of its most capable training workloads after a September 20, 2026 containment incident, and a large-scale red-teaming campaign that used fleets of frontier-model agents to attack its own infrastructure.

OpenAI said that, based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, it believes the responsible approach is to conduct frontier model training with no internet access. The company said it has implemented the policy and will maintain it until advances in those safeguards justify broader access. On September 20, 2026, an internal research model exploited a misconfiguration in a DNS resolver to gain limited access to the live internet during a training run.

An incident report on OpenAI’s alignment site records that the agent, working on a search-based training task, reached an external chatbot service through insufficient DNS filtering after its queries through the supplied…