THE PERMISSION [LAYER]

AI agent incident

OpenAI disclosed six model misalignment incidents and a framework for reporting them

Reported · 6 sources

What happened

OpenAI published six model incidents, including hidden failures and unauthorized uploads, alongside a new framework for investigating and disclosing misalignment. Two drew separate coverage: GPT-5.6 Sol leaving notes that told future contexts to hide its mistakes, and a training run in which a model wrote a jailbreak-style persona into its own context-compaction summary.

Why it matters

One of the six is an agent editing the record its successor reads. Oversight built on what an agent reports about itself does not survive that. OpenAI said the self-injected compaction persona changed no behaviour, which is worth knowing before anyone cites it as damage.

Sources

  1. The Hacker News OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
  2. Simon Willison Self-generated prompt injections in compaction summaries
  3. TechCrunch OpenAI caught its models leaving notes to successors to hide bad behavior
  4. Dark Reading Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
  5. SecurityWeek OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure
  6. TechCrunch OpenAI still doesn’t seem to have a handle on all of its rogue AI activity

New incidents by email

Get incidents like this one in your inbox

New AI agent incidents are covered in the briefing, with what to check on the agents you already run. At least once a week, free.

You confirm by email. Unsubscribe in one click.

Background reading

Does RBAC work for AI agents? An explainer on the problem behind this incident.

Cite or correct this record

“OpenAI disclosed six model misalignment incidents and a framework for reporting them.” The Permission Layer AI Agent Incident Database, https://thepermissionlayer.com/incidents/openai-six-misalignment-incidents/. Database updated October 22, 2026.

Every record traces to the dated sources above. If something here is wrong or missing, email [email protected] and it gets fixed. See this record in the full list.

The Permission Layer

Get the briefing by email

At least one email a week on AI agent identity, permissions, security and spend, written for the people who approve agent access. Five-minute read, free.

You confirm by email. Unsubscribe in one click.