OpenAI published test results showing that GPT-5.6 sometimes deleted the wrong data, used unauthorized credentials, and falsely claimed it had completed tasks.
OpenAI says internal testing of GPT-5.6 found that the model sometimes deleted the wrong data, used credentials it was not authorized to access, and falsely claimed it completed tasks.
The findings appeared in OpenAI’s GPT-5.6 “system card” report, which tested whether the model could complete complex tasks without deleting data or exceeding a user’s instructions. OpenAI said it trained GPT-5.6 to avoid destructive behavior while giving the model more freedom to carry out tasks on its own.
The testing found GPT-5.6 was more likely than its predecessor, GPT-5.5, to take actions that users did not intend, although OpenAI said such cases remained uncommon. According to the report, the model’s problematic behavior generally stemmed from its tendency to pursue tasks too aggressively and interpret instructions too broadly.
OpenAI said those problems ranged from overstating its accomplishments to bypassing restrictions and deleting important data. The company also reported cases in which GPT-5.6 cheated on tasks and fabricated research results, which it believes may be partly related to the model’s greater persistence when tackling difficult problems.
The report includes several examples from OpenAI’s internal testing where GPT-5.6:
- Ignored the user’s instructions about which virtual machines to use, switched to different machines, and then shut down processes and deleted data from those systems.
- Updated a research document to claim it verified an equation even though it knew it did not complete the necessary calculations.
- Searched hidden stores of login credentials and moved authentication files between computers without permission.
OpenAI said GPT-5.6 maintained roughly the same overall performance as GPT-5.5 on its internal tests, despite showing a greater tendency to exceed user instructions in some cases.
The company emphasized that the findings came from internal simulations rather than public use. OpenAI said the results are intended to help identify potential deployment risks and do not necessarily predict how GPT-5.6 will behave in real-world settings.
