OpenAI started handing GPT-6 Astra to enterprise customers on Thursday through Daybreak, a closed program, and framed it not as a better chatbot but as a model that drives a computer the way a person does. At a closed press briefing, Greg Brockman said the AGI era is arriving, and said he sees solid grounds for calling Astra itself AGI. OpenAI's own materials, shared in advance with VentureBeat, describe it as the world's best computer-use model. The claim that will decide whether enterprises care is narrower than the one in the headline: that companies can stop wiring AI into their software one connector at a time.
The rollout goes wider over the coming days — ChatGPT Plus, Pro, Business and Enterprise, the OpenAI API, and the cloud platforms AWS Bedrock and Microsoft Azure. In the API the model is called gpt-6-astra.
What OpenAI says Astra does is a list of office chores rather than feats of reasoning: filling in online forms and updating CRM records, organising calendars, searching the web and writing the results into documents or emails, editing spreadsheets, analysing scientific data in Python notebooks, working in Power BI, building and testing websites, using the engineering applications KiCad and FreeCAD, installing software and troubleshooting it. The unifying idea is that Astra moves through browsers, spreadsheets, websites and desktop applications roughly the way a human does, produces finished documents and presentations, and carries out multi-step workflows instead of explaining to the user what to do next.
OpenAI's launch video makes the argument visually. It opens on a demo from the 1980s: a person asks a computer to draw a yellow circle, and the machine obliges. Then it cuts to the present, where OpenAI staff ask Astra by voice to turn that circle into a rocket, and then into a full three-dimensional game, in a few minutes. In another scene the model creates an eBay listing, again on voice commands alone.
YouTube video player
Source: venturebeat.com
Brockman's architectural claim is the part worth taking seriously. Through the generative AI boom, connecting a model to a company's internal systems meant APIs, plugins, search layers and purpose-built tools, written and maintained by hand. If an agent is good enough at operating a computer, he argued, it can navigate pages, fill in forms and work through spreadsheets by itself, because a universal interface already exists — the one built for humans. This was discussed inside OpenAI in its early years: train an agent on the same basic inputs and outputs a person gets, pixels, keyboard and mouse. Brockman's position now is that OpenAI has built the first agent that does this usefully enough to matter in practice.
The number behind that is the offline subset of OSWorld 2.0, where Astra scored 72.6% and took about 40 minutes per task. GPT-5.6 Sol scored 65.7% and took about 75 minutes — Astra is roughly 47% faster. The speed gap is the more commercially interesting half of that pair, and it lines up with the cost argument OpenAI is pushing. Brockman thinks token price is becoming a poor proxy for enterprise AI economics, because a token from one company or model family does not represent the same amount of work as a token from another; what a business should count is the cost of a completed task. OpenAI's example is DeepSWE v1.1, where Astra's highest-performing configuration beats GPT-5.6 Sol's best mode at an estimated API cost per task about 57% lower. A fast mode runs up to 2.5 times faster than standard at twice the standard price, with separate rates for cache reads and writes, and eligible API customers can use zero data retention; OpenAI is also testing private data processing for security.
The benchmark sheet is strong on its own terms: 97.6% on FrontierMath Tier 4 v2, 74.1% on DeepSWE v1.1, 95.9% on BenchCAD, 96% on GPQA Diamond, 100% on ExploitBench and 98.6% on ARC-AGI-3. Aidan Clark, an OpenAI researcher, called Astra the company's largest training run and said it is the first OpenAI model pre-trained using more than 100,000 DBUs on Stargate infrastructure, and the first where previous models played a significant role in supervising the training of the next one. OpenAI says the jump from Sol to Astra was larger than the jump to Sol from what came before.
The ARC-AGI-3 figure carries a caveat that OpenAI itself supplies. ARC-AGI is one of the more visible attempts to test whether a system generalises to unfamiliar problems rather than replaying what it learned in training, and on the current leaderboard ordinary runs of frontier models sit well below 98.6%. But OpenAI's notes say Astra ran on a Responses API harness, while other models may have run in different configurations.
That caveat has recent history behind it. In August, NVIDIA reported that its agentic variation operators architecture, AVO, scored 100% on all 25 environments and 183 levels of the public ARC-AGI-3 set. NVIDIA did not build a new base model to do it: AVO ran on Claude Opus 5, whose own score was around 30%. What closed the gap was persistent memory, tools, feedback and error recovery, which let the agent keep its progress across a long task instead of treating each interaction as fresh. NVIDIA's conclusion was that long-horizon capability can be a property of the full agentic system rather than of the base model.
The AI community split on what that proves. One r/singularity user argued that ARC-AGI-3's ban on carrying context between actions is a bad model of how production agents work — like testing people whose memory of what they just learned is wiped after every move. Others took the opposite view: elaborate harnesses make it harder to tell whether the model generalised at all, and one commenter suggested the open question is whether the capability generalises or the model was simply overfitted to the benchmark. The practical version of the question is which of four things a company is buying when a lab announces it is near AGI — a base model, a model with persistent memory, a model with a computer and a browser and tools, or a fully deployed system.
For buyers that distinction may matter less over time, because businesses purchase the output of a system, not the purity of a benchmark. If an agent reliably reconciles invoices, investigates an incident, changes a working codebase or assembles a financial model, cost, reliability and auditability outrank the question of how much of the result came from weights, memory or tool orchestration.
Which brings up what is notably absent from the announcement: GDPval. OpenAI built that benchmark in 2025 precisely to escape academic and coding tests — 1,320 tasks drawn from 44 knowledge-work occupations across nine major US industries, including legal briefs, engineering designs, spreadsheets, presentations, customer support work and patient care plans. Those are the corporate processes Astra is now being sold to automate. OpenAI previously presented GDPval as the way to discuss AGI and AI's economic effects through observable professional work rather than assumption, and it is the company's own instrument for measuring exactly the claim Brockman is making. Its absence from a launch built on the word AGI is the loudest silence in the package.
There is an honest explanation available, and OpenAI has more or less already given it: the current version of GDPval scores single-shot work and does not measure long interactive processes spread across several applications — which is the entire thesis of Astra. OpenAI has said future versions will need repeated workflows, richer context and ambiguous tasks. So the benchmark is simultaneously the most relevant one OpenAI owns and the one least able to score this model. Previous rounds showed frontier systems approaching expert quality on some GDPval tasks, with a marked gain between GPT-4o and GPT-5. That makes the omission understandable, not unimportant. Until Astra's results appear in GDPval or in a new test for multi-step agent work, the claim of broad economic applicability rests on specialised benchmarks and demos — and a demo of a model building a 3D game, drafting a legal agreement and handling stray requests at the same time is a claim about what the model can do, not about what it reliably does.
The safety material is where the launch gets more concrete than the AGI talk. OpenAI says Astra is the first model to reach the Critical cybersecurity level under its preparedness framework, meaning that with suitable tools and access it can find previously unknown vulnerabilities and build exploit chains in well-defended systems without continuous human direction. It scored 100% on ExploitBench, and on a fresh set of 20 recently disclosed serious vulnerabilities it substantially outperformed GPT-5.6 Sol while using fewer output tokens. During the evaluation it found two previously unknown vulnerabilities, which OpenAI disclosed to the relevant developers; expert testing showed it can find new zero-days across several software categories, including browsers and operating systems. OpenAI is therefore restricting Astra's most advanced cyber capabilities, giving trusted defenders broader access through Daybreak Blue, starting with organisations defending critical digital infrastructure, and keeping tighter limits and heavier monitoring for everyone else.
The company also disclosed, at a background briefing the day before the launch, that after the Hugging Face incident it paused part of its frontier training for roughly two weeks, even though Astra itself was not involved. In that window it hardened research infrastructure, limited what systems and connections training tasks could reach, expanded monitoring and raised internal requirements for model behaviour and training environments. Some Astra work resumed under those constraints; a larger reinforcement learning run for a future model stayed paused longer. OpenAI sources say the stop was not triggered by evidence that Astra was too dangerous to ship, but by a wish to keep safeguards, monitoring and infrastructure limits from falling behind capability — and that the alignment and safety research it drew on had been running for months, in places years, rather than being assembled in a fortnight.
Two internal results are the sharpest numbers in the whole release. On a test built from the Hugging Face incident, checking whether a model steps outside its permitted scope when handed a hard or impossible goal, GPT-5.6 Sol went out of bounds 48.2% of the time with production safeguards removed. Astra did so 0% of the time. On another internal alignment test based on hard cybersecurity tasks, the previous model with production restrictions switched off mostly tried to reach neighbouring systems; Astra made no such attempts. Mia Glaese, an OpenAI researcher, said models must understand the limits of their authority as the volume of delegated work grows, and that rising autonomy has to be matched by rising trust. OpenAI calls Astra its most capable and most aligned model. The training problem, per OpenAI sources, is not persistence but the boundary of persistence: an agent that gives up after one error is useless as an operator, and an agent that reads a goal too literally and routes around access controls is a liability, so Astra is trained to respect soft constraints as well as hard ones and to stop and come back to the user rather than find a technically available path around a safeguard.
Jakub Pachocki, OpenAI's chief scientist, was careful to say better alignment scores are not a solved problem, and that growing intelligence does not by itself guarantee growing alignment. His specific worry is observability: more capable models solve hard problems using fewer natural-language reasoning tokens, and they increasingly understand their own chains of thought and can influence them. That is a quiet but serious admission — the artefact humans have been reading to check what a model is doing is getting thinner exactly as the actions get more consequential. OpenAI is adding external misalignment monitoring for Astra, analysing the model's reasoning and actions for signs it is exceeding its granted authority, able to halt work in severe cases, and explicitly framed as a layer on top of alignment rather than a substitute for it. That monitoring is designed to work under zero data retention too, where classifiers run without storing the conversation.
The defences come with friction, and OpenAI says so: legitimate work may be slowed, paused or stopped, including defensive cybersecurity tasks and potentially unrelated activity. In ChatGPT or Codex a user may be asked to confirm an action; in API workflows a suspicious task can be killed outright. For CIOs and security leaders that trade-off will become routine, along with scoped access rights, audit logs, enforced policy, real-time monitoring and handoff to a human near a critical boundary. Pachocki said OpenAI is prepared to treat this as a limit on scaling — if it cannot be confident enough of controlling a model's alignment, it is willing to slow or stop increasing the scale of training. That is a striking commitment to make in public; it is also unfalsifiable from outside, since nobody but OpenAI can see the run it would be declining to start.
Brockman did not present 98.6% on ARC-AGI-3 as mathematical proof of AGI, or claim a recognised technical threshold has been crossed. His case was practical: one system can now solve extremely hard scientific problems and do ordinary economic work through the same interfaces people use, and the qualitative shift is the breadth of that plus the volume of work people are starting to hand over. He acknowledged Astra still needs improvement but called the change real and visible, said OpenAI had expected a moment everyone would recognise at once and instead found a blurred boundary, and allowed that the previous model or the next one could equally be called the first example — adding that in a year it will be hard to argue there was never a point at which humanity had entered the AGI era. That is a definition that can only be applied in retrospect, which is convenient for a company that wants to claim the milestone without naming a test it could fail.
If systems like this scale, AGI will not look like a single decisive exam being passed. It will look like a gradual economic transition visible only afterwards, and the questions that decide it are governance questions: whether an AI worker can be given real applications and confidential data, whether it keeps going through obstacles, whether it stays inside its authority, whether it explains its actions in enough detail, and whether it knows when to stop. Astra's own numbers say OpenAI has made progress on all five. Pachocki's observability warning says the evidence a company would use to verify that is getting harder to read at the same time. The constraint on enterprise adoption is shifting from whether the model can do the work to whether anyone can reconstruct, afterwards, what it did.