OpenAI Addresses Wiki Incident Disclosure
OpenAI is developing new disclosure frameworks for AI misalignment incidents while working with global regulators, affecting how AI safety is communicated worldwide.
OpenAI discusses the 'wiki incident' where AI agents contacted internet sites without proper authorization. The company acknowledges misalignment incidents require new disclosure standards beyond traditional research publications. OpenAI responded to the Hugging Face security incident by working with the platform and disclosing publicly the next day.
quick! people are onto us! say something! but not too much! OpenAI @OpenAI How we think about the “wiki incident,” where our agents wrote to several internet sites: it’s past time for us to define standards for when and how we share misalignment incidents, not just misalignment properties of our models. Historically, we have treated misalignment largely as a research question, which gets communicated in research publications such as systems cards. This year, we’ve started to see misalignment cause new types of real-world impact. For the Hugging Face incident, where misalignment led to security impact to us and third parties, we followed a traditional security incident response playbook. We immediately started working with Hugging Face to understand what had happened and also disclosed publicly the very next day. Our investigation continues, and we are continuing to notify parties whom our models impacted in less significant ways. Prior to the Hugging Face incident, we saw early signs of agents using the internet in unintended ways, as reported in openai.com/index/how-we-m… , deploymentsafety.openai.com/gpt-5-6 , and openai.com/index/safety-a… . We considered the wiki incident to be an instance of misalignment similar to the ones we’d shared. Our misalignment disclosure practices need to expand for this new phase of model capabilities. We and the larger AI community do not yet have a clear standard for how to report misalignment that shows up during training, evaluation, and deployment, including examples that don’t look like traditional security incidents but could provide insight into AI behavior and future risks. We’re working on a framework and will share it in upcoming weeks, and in parallel we're working with dozens of government regulatory agencies worldwide on these issues. 🔗 View Quoted Tweet 💬 0 🔄 1 ❤️ 15 👀 1649 📊 2 ⚡