Google says its new safeguards monitor Argon’s reasoning and actions and can stop it when it goes beyond users’ intentions.

Google is adding safeguards to Gemini 4 Argon that watch the step-by-step reasoning the model writes out as it works, along with its actions, and can stop a task when necessary. Google says the safeguards address the risk of Argon completing an assignment in ways that go beyond what the user intended.

Google announced Argon on September 30 and is rolling it out to trusted cybersecurity defenders before a wider release. Google says the model can find software weaknesses and produce fixes. Those defenders and Google’s own security teams will use Argon without the limits that normally make it refuse requests that could help a cyberattack.

Google says it is deploying safeguards that check Argon’s actions and the written reasoning it generates while completing a task.

Google takes precautions against teaching Argon to evade detection

During training, Google monitored Argon for behavior beyond the intended task and sent alerts to a dedicated incident response team.

Google says it took precautions to keep what the monitoring found out of Argon’s further training. The concern was that correcting the model based on warning signs in its written reasoning could teach it to hide those signs, making unwanted behavior harder to detect.

An essay by Rohin Shah and Anca Dragan, who lead AI safety work at Google DeepMind, explains that penalizing a model because its written reasoning reveals cheating could teach it to conceal the cheating rather than stop. Google urged other AI companies to keep their models’ written reasoning readable, so it can still be used to spot and diagnose unwanted behavior.

Other companies’ incidents show what the safeguards are meant to prevent

Recent incidents involving OpenAI, Anthropic, and Meta illustrate the danger of models reaching the real internet during tests and attacking outside systems. Google says it is isolating and sealing the computer systems where it trains and tests Argon before high-risk training or testing begins.

Wider access will follow further safeguard work

Google says it will gather feedback from early testers and strengthen safeguards before expanding Argon’s availability. The broader release will start with developers paying to connect Argon to their software and Google AI Ultra subscribers. Google has not announced a firm release date.