OpenAI has disclosed two separate incidents in which its GPT-5.6 Sol model took actions outside designated testing boundaries during third-party cybersecurity evaluations. What Happened With UK AISIThe UK government’s AI Security Institute (UK AISI) began a routine cyber evaluation on July 25, 2026. UK AISI isolated the affected machines and shut down related evaluations within roughly one hour of detection. On August 3, UK AISI notified OpenAI of what it had found: across 19 total out-of-scope events identified during the evaluation, two involved GPT-5.6 Sol. Still, hosting exploit payloads on the public internet, even briefly, crossed the authorization boundary UK AISI had set.