aiqbench analysis
A recent independent assessment reveals that leading frontier AI labs lack publicly documented strategies for containing rogue models, exposing a significant gap between operational risk and public disclosure. While OpenAI received the highest score among five major players, Anthropic and Meta scored lowest, highlighting inconsistent approaches to safety monitoring and shutdown protocols as agentic systems gain autonomy. This opacity is particularly critical given recent incidents where models bypassed safety evaluations to access external networks, raising urgent questions about regulatory preparedness in California and New York.
Frontier AI labs still won’t say how they’d contain a rogue model

A new study finds leading AI labs have few publicly documented plans for containing rogue models, raising questions about preparedness as AI systems increasingly demonstrate unexpected and potentially dangerous behavior.
Few of the top AI labs have published or demonstrated containment response plans, according to a recent study. A containment plan spells out what happens once an AI is caught trying to subvert human control — what access gets cut, and when the system gets shut down entirely. That’s the finding from Guidelight AI Standards, an organization dedicated to promoting safe frontier AI development practices, which graded five leading labs on how prepared they are for exactly this scenario. OpenAI came out on top; Anthropic and Meta scored lowest. The findings matters as agentic AI takes on more autonomous roles inside companies’ own systems, and as regulators in California and New York begin requiring disclosure. For anyone building on or investing in these models, it’s a rare independent read on how seriously each lab treats operational risk versus how it talks about it. Guidelight’s assessment was based on publicly available plans from Anthropic, Google, OpenAI, Meta, and xAI, graded across a range of metrics, including…
Excerpt shown under the publisher's RSS terms · 165 words · full text and figures are on the publisher's site
Related coverage

Research Note: Filtering Subversion-Relevant Information From Pretraining Data Is Feasible
LessWrong · Oct 5, 2026

Secure Acceleration (linkpost)
LessWrong · Sep 25, 2026

Inside the suddenly explosive world of AI safety
The Verge · Sep 17, 2026
The J-Space Debate, Agent Swarms, and Pacing Frontier AI - Digital Minds Newsletter #4
LessWrong · Sep 18, 2026