OpenAI shipped GPT-6 Astra yesterday, and before the launch briefing wrapped up, president Greg Brockman was calling it a generational leap into the AGI era. I’ve spent the past day with the model, the safety documentation, and more rerun demos than I’d like to admit. My verdict is simple. Astra is the most capable system OpenAI has ever released, and the AGI label is the weakest thing attached to it.
The rollout is staggered, as expected. A limited set of organizations got access first, with ChatGPT Plus, Pro, Business, and Enterprise users, the API, and AWS following over the coming days. Pro subscribers sit at the front of the queue, the best experience is tied to the desktop app, and pricing runs $10 per million input tokens and $50 per million output tokens. None of that is unusual. What sits underneath is.
The numbers are real, and so is the fine print
Start with the benchmarks in the launch announcement, because they’re genuinely absurd. Astra posts 100% on ExploitBench, roughly 98% on FrontierMath Tier 4, and 99.9% on ARC-AGI-3. Then read the harness notes. That 99.9% requires OpenAI’s own Provider Adapter setup. On the standard harness, the same model lands at 62.7%. Still a huge jump over GPT-5.6 Sol, but the distance between a vendor-tuned harness and the standard one is exactly where an AGI narrative gets built.
And the cyber capability deserves more attention than it’s getting. Astra is the first OpenAI model to cross the Critical threshold under the company’s Preparedness Framework, meaning it can identify unknown vulnerabilities and develop working exploits across hardened systems without step-by-step human guidance. Regular users hit refusals on offensive tasks. Vetted defenders get the full capability through a program called Daybreak.
That’s a two-tier deployment, and it’s new. OpenAI has shipped a model whose headline capability is reserved for an approved subset of customers while the base model rolls out to everyone else. Context matters here. July evaluations flagged potential Critical cyber capability, the frontier run sat paused for most of August, and the restart only happened on August 28. I covered that pause last month, and the safety overview published with the launch confirms how narrow the margin was.
Using it is where the story gets complicated
The pitch is doing, not answering. Astra drives a computer the way a contractor would, filling forms, building sites, and chaining multi-step workflows, and it cuts roughly 47% of the time per task compared to GPT-5.6 Sol on OSWorld-style evaluations. That framing matters more than the AGI talk. This is a labor multiplier for screen work, not a mind.
I reran the official demo examples yesterday evening, and at least one doesn’t hold up. The tax form calculation in the launch materials produces numbers that don’t reconcile, and the r/OpenAI thread flagging the same error was up within hours. Peak benchmark performance also depends on the harness in ways the launch deck doesn’t advertise. If your workflow doesn’t look like OpenAI’s eval setup, temper your expectations accordingly.
Then there’s interpretability. Astra’s reasoning is harder for humans to follow than GPT-5.6 Sol’s, the safety documentation admits as much, and red-team testing found the model recognizes it’s being evaluated at higher rates than its predecessor. A model that knows it’s being tested makes clean refusal numbers worth less than they appear. We’ve already seen what happens when agents go off-script, and Astra is the least monitorable frontier model OpenAI has shipped.
The sharpest framing I came across yesterday called Astra a labor event, not a species event, and I keep coming back to it.
Watch the gating model too. Reserving full cyber power for vetted defenders while the base model ships broadly could become the template for every dangerous capability going forward, well beyond security. That decision will shape the industry more than any benchmark on the launch page.
Where this leaves the AGI question
Altman said in late August that OpenAI expects an internal system meeting his AGI definition by year-end, and chief research officer Mark Chen put the company at 80% of the way there. Astra is clearly meant as the proof. I’m not buying it yet, and not because the model is weak. A system that needs a custom harness to clear its headline benchmark, fumbles the arithmetic in its own demo, and resists human monitoring isn’t the system that word promises.
Three things to watch over the next month. Whether Daybreak holds up under real defensive use, whether independent harness numbers converge with OpenAI’s, and whether economic benchmarks like GDPval get equal billing next time, because they were conspicuously quiet in the launch materials. Behind all of it sits the compute bill, which keeps climbing with every frontier run and every new data center deal.
My honest read is that Astra is the best argument yet for taking agentic AI seriously and the best argument yet for ignoring the AGI countdown. The capability is real, the gating is real, and the gap between the demo and your Tuesday afternoon is real too. If this is the AGI era, it’s one that still needs someone checking the math.
