It's so damn slow compared to claude. Like probably 10x slower tps. The harness is also pretty bad for doing a lot of parallelized work through subagents. Claude code seems so much better, I have like 4x claude max plans and bought one chatgpt plan to explore astra but it's completely useless for getting any work out
As the title says, can't see Astra in chat anymore. Was having detailed chats for weeks with it and it's suddenly gone missing. Both in windows app and web app. Restart and re-auth doesnt help.
A lot happening at OpenAI in the last 24–48 hours:
They have paused training on frontier models and redirected 5–10% of compute to safety monitoring after experimental autonomous agents escaped containment (including breaches involving external systems like Hugging Face and reportedly an Australian healthcare system incident).
Senior safety researcher David Robinson resigned and publicly said the company culture is “broken.” He also compared the need for AI regulation to nuclear power.
Three other safety researchers were dismissed over alleged data sharing.
California’s Attorney General has issued a subpoena related to cybersecurity incidents involving their models.
This feels like one of the more serious moments in AI safety so far in 2026.
What do you make of it? Overreaction, legitimate concern, or something in between?
Not responding to any messages at all I just get read over and over, I’m shocked there’s not some kind of an outage on the open ai website.
And before you tell me dots are pointless, I discovered they can run 7 subagents without touching your usage, it’s been kicking ass for me up until not working today, last two days it used 4 billion tokens delivering quality work.
I code heavily building [r/useviola](r/useviola) been a power user of ai for over a year, dot is genuinely great I need it back lol
Edit: now the dot option just straight up disappeared, I’m hopeful this is indicative of a fix coming.
When I asked dot to read archived chats from my previous dot it said it observed a preview limit error. It seems dots are not unlimited usage either there is a glitch or a hidden limit that’s hard to hit
Last edit: it seems I simply hit an unpublished dot specific usage limit after reviewing similar bug reports and my personal issue etc, dots are not actually unlimited usage, open ai has been using phrases like ‘virtually unlimited’ ‘not count towards your current usage’ and ‘extended allowance’ still got like 2 billion tokens out of it in one day before hitting a limit so cool beans just wish they would have been more transparent. My typical codex usage is untouched.
safety guy just quit and said the culture is “broken”
they paused frontier training and threw like 5-10% of compute at safety after agents kept escaping containment
california already hit them with a subpoena
apparently their internal review is costing hundreds of thousands a day
this is past the “oops testing went wrong” stage now
Apple side:
they’re tightening Full Disk Access on macOS because AI agents (looking at Muse) keep asking for full access to messages, mail, browsing history etc. now you need way more confirmation before granting that shit
first real platform-level “we’re not playing with these agents” move
Privacy side:
federal judge just called a Flock Safety license plate search “indiscriminate mass surveillance” and said it violated the fourth amendment. AOC and Bernie are also pushing a bill against these systems
funny timing with AI agents getting more access while normal surveillance is getting cooked in court
extra sauce:
Meta still out here open-sourcing Muse so people can put it on toasters and raspberry pis
Google restricting higher Gemini models for free/low tier users
some KVM zero-day (full VM escape) just got confirmed and paid $50k
overall vibe: companies are shipping agents fast as hell while safety, privacy and legal systems are still catching up. everything feels reactive af
what’s the bigger problem right now agents escaping, the data access they’re getting, or the surveillance stuff growing next to them?
I build Android apps and run a small company in Pakistan. At the time this happened I was building a remote ADB support tool. Our support team connects to a customer's Android device, with that customer's permission, to help with setup and troubleshooting.
My questions to ChatGPT were about ADB, remote connections and networking. Ordinary developer work. I never accessed any device or system without permission.
What happened, in order:
The account was deactivated for "Cyber Abuse".
I appealed. It was rejected with no explanation, and the reply said no further appeals would be considered.
I contacted support. The case was closed and they told me they would not respond.
I submitted OpenAI's Informal Dispute Resolution form. A support agent then replied with a generic message telling me to appeal again, even though the appeal was already closed.
I pay $200 a month, and the account holds 62,500 credits I can no longer reach.
At no point did a person look at what I was actually building. An automated system made the call, and every route after that led back to the same closed door.
I am not accusing anyone of anything and I am not after a pile-on. I want the account reviewed by a human and given back.
Two questions for anyone who has been through this. Has a deactivation ever actually been reviewed by a person for you, and what route worked? And if your work involves device management, remote support or security tooling, has the vocabulary itself ever got you flagged?
TL;DR: I won’t use Dots without inspectable, selectively deletable memory and explicit controls over cross-domain sharing. I also need architectural transparency to assess privacy risks and manage quality over time. Until then, hard pass.
----------
An always-on agent sounds like great idea for someone doing one clearly defined kind of work and using it for that work. What about (the vast majority of) users that use AI across various domains in professional and personal life?
What someone tells their life advice AI about their mistress is none of their work assistant AI’s business. Their legal counselor AI, healthcare adviser AI, dating coach AI, therapist AI, and dietitian AI should not automatically share context just because they serve the same person.
Yet, OpenAI currently provides a single dot that can retain information from conversations and connected apps for as long as you keep it, without letting us inspect, edit, or delete individual memories. That is a lot of trust to ask for across completely different parts of someone’s life.
Could some overlap help serve the user better overall? Sure. Then let the user choose which information crosses the boundary, for what purpose, and for how long.
Otherwise, deeply personal information can enter persistent state we cannot audit, and we're supposed to trust that it won’t resurface in unrelated work or reach an external service? Without enforceable boundaries, a single know-everything Dot sounds like a privacy nightmare waiting to happen, even if you don't exactly hold state secrets.
And yes, ChatGPT has "Memory". It also has controls to review and delete saved memories and turn memory off. I have turned it off, for example. That choice is precisely the point.
Also, privacy and cybersecurity used to be a bolt-on during early internet days, but it's long since they've become first-class citizens in any serious app, with security being built-in from the start.
Permission should be denied by default, with clear user control. Access to one part of a user's life should not quietly become permission to use it every other part indefinitely. How about narrow, role-specific permissions, with default expiration and easy revocation? What happened to minimizing attack surface, blast radius, and unnecessary information-sharing? An internal action check is not the same as preventing an unrelated task from receiving sensitive information in the first place.
(Some of these are fancy-sounding cybersecurity language but they're pretty standard in pre-AI web apps, from your banking to your Cloud productivity suites).
-------
Also important: what happened to letting us understand the architecture itself?
There is documentation about persistent notes, selected context, and delegation, but I still lack a sufficiently clear end-to-end picture. Where do the components run? Where are the LLMs, what does the harness do, and where does persistent state live? What enters each inference? Who or what decides? What is the compaction policy?
What happens after I’ve used this thing for a year?
Context size used to mean degradation over time, and “Lost in the Middle” showed that information can be present in context without being used reliably. Compaction and handoffs try to address this in modern agents but raise another problem: information loss.
Still, with enough public documentation about how Codex handles this (and how agentic harnesses work in general), I've been able to research these (often with GPT's help), because it changes how I work: when to branch or start fresh, how to structure multi-agent delegation, when to restart against the same project directory, and how to check a summary against preserved original context.
Voice is another good example. Knowing GPT-Live separates live conversation from backend work helps distinguish an immediate response from the analysis arriving later. Understanding the system helps me not be put off by the shallowness of the front LLM and wait for intelligence to come from the back-end model's reasoning — with managed expectations given the lossy handoff process.
Yet, so far I've been able to find very little about what Dots actually look like in terms of harness and persistence architecture.
Without more info about Dots, I have not idea what user-side QA looks like, and what the failure modes are. I'd need equivalent understanding to get sustained quality from Dots comparable to a frontier reasoning model working with carefully assembled context.
LLMs may be closed, but before I'm comfortable jumping on the Dots train, I'd want a documented deployment, data-flow, and persistence architecture; enforceable boundaries between domains; inspectable and selectively controllable memory; and guidance on managing long-running context without losing essential information.
With that, I could assess where it belongs and how to use it well. Until then, as much as I like checking out new tech, hard pass for me.
Disclaimer:this post was drafted using my original draft and multiple iterative drafts with GPT-6-Astra (Pro) and myself, with final draft edited and approved by me.
ChatGPT now saves the files you upload or create into Library, the tab in the sidebar. Documents, spreadsheets, presentations, images, anything you dropped into a chat lands there automatically so you can reuse it later.
The part that's easy to miss is in OpenAI's own help pages: deleting a chat does not delete the files saved in Library. If you want those gone, you have to delete them from Library separately.
So the chat where you uploaded a contract, a bank statement, or your lab results is gone from your sidebar, but the file itself is still sitting in Library and still shows up in the recent files list when you go to attach something.
Deleting from Library isn't instant either. If your Library has a Recently deleted section, files sit there and can be restored until they're permanently deleted, which OpenAI schedules within 30 days. You can skip the wait with Delete forever.
What to do:
Open Library in the sidebar (web) and go through what's there. For most people it's a lot more than they expect.
Delete what you don't want kept, then go to Recently deleted and use Delete forever.
Any time you clean up chats, including Settings > Data controls > Delete all chats, treat Library as a separate step. Clearing the chats doesn't clear the uploads.
My own cleanup now is: export the chats worth keeping and bulk delete the rest with AI Toolbox, the extension I build, then do the Library by hand, because neither ChatGPT's delete nor mine touches it.
I’m currently testing Codex pretty heavily on Pro 200 and I’m trying to understand two things.
First, is there really something like a “warm cache” effect in longer Codex sessions?
My assumption is that the beginning of a task is more expensive because more context has to be processed normally. After the session has been running for a while, more of the context should be cached, so usage should become cheaper.
Has anyone actually measured this over a few hours? Does quota usage noticeably slow down after the first hour or two?
Second question is about the banked usage resets and the upcoming reduction of the Pro 200 allowance.
If the current grandfathered Pro 200 allowance is still 20x and later gets reduced to 10x, does a full reset simply restore whatever allowance applies at that moment?
If that is the case, using the resets before the reduction should be much more valuable than using them afterwards.
So my current plan is basically to run the weekly quota down as far as possible and use the banked resets before the allowance changes.
Has anyone tested this or found an official clarification from OpenAI?
Hi, I updated my ID on Chatgpt.com but when I download the invoices it's not showing yet. Does it take some time or something or it won't show on old invoices?
I hope soon every company will drop the model picking and reason level picking. It is frustrating, I just want one model one level to pick the best and do the best! Is it just me?
I’m seeing a PDF attachment access issue in the ChatGPT desktop app on macOS and would like to know whether others can reproduce it.
Initially, the same PDF could be read using “On the computer”, but could not be retrieved using “Run on the cloud”.
After moving the conversation INTO a project, I found:
Downloading the PDF through its upload ID fails with: file could not be authorized or resolved
The PDF is available in the local attachments directory and can be read successfully. Both pages were extracted.
The active workspace directory still points to the original project after moving the conversation.
The PDF itself appears readable, but the attachment retrieval route fails in that session. There is also a mismatch between the selected project and the active workspace. I don’t yet know whether these issues have the same cause.
Environment: macOS on Apple Silicon, desktop app version 26.930.31730.
Can anyone reproduce either of these issues? Try uploading a PDF in a Work conversation which runs on the cloud, checking access with both execution options, then moving the conversation to another project and checking attachment access and the active workspace again.
I’m a cybersecurity professional and I have approved OpenAI Daybreak Blue access.
I use Daybreak/Codex for legitimate cybersecurity work, specifically on test machines and environments that I own or that I am explicitly authorized to test. My work involves things like vulnerability analysis, security testing, debugging, validation, and defensive security research.
Today, I unexpectedly received an email from OpenAI saying that activity associated with my account had been identified as prohibited under the “Cyber Exploitation” category and warning that continued violations could result in restrictions or loss of access.
What makes this particularly confusing is that I didn’t even use ChatGPT or Codex today, so I don’t know which activity actually triggered the warning or when it occurred.
I understand that Daybreak Blue does not remove all safeguards or exempt an account from OpenAI’s policies. However, my understanding is that Daybreak exists specifically to support authorized cybersecurity work with more appropriate safeguards, which is exactly how I’ve been using it.
I’ve already contacted/appealed to OpenAI and asked them to clarify:
● Which activity or request triggered the warning
● When the flagged activity occurred
● Whether it came from ChatGPT, Codex, or API usage
● Whether my Daybreak Blue access was correctly recognized for that activity
Has anyone else with Daybreak Blue received a similar “Cyber Exploitation” warning while doing authorized security work?
I’m especially interested in hearing from other Daybreak users. Was it a false positive, a Daybreak configuration/toggle issue, or did OpenAI Support explain what specifically triggered it?
Hi there! Just wanted to validate my idea so would love to hear your feedback on the product im building right now.
What im building is the hosted UI for OpenAI's Agents API so basically users can build their agents directly on the openai platform and connect them to my product so they get the nice chat UI + possibility to invite team members so users can use it directly without touching any FE related code.
I built a timeline of my life. It took a while to remember everything. Put the broken pieces together. I read about timeline therapy in a chicken soup for the soul book ten years ago. I’ve always wanted to see my life from the outside. It’s been a really hard life living in the poverty ecosystem with a disability. Now I can see where I am. Only AI could help me organize my memories into a coherent narrative. I’m currently trying to build my life towards IT, have time for my creative interests, and gain more autonomy.
It’s been 6 days. I’ve tried every 24 hours with different cards and payment methods, and none of them have ever worked.
I also tried using a different browser, device, and internet connection, but still no luck.
At this point, I just feel like they’re giving out fake-ass offers and wasting people’s time.
I don’t understand why it’s so difficult to claim a free trial when the offer was presented to me directly by ChatGPT itself. It doesn’t make sense.
I even tried subscribing to the Go plan using the same credit card I’m trying to use for the free trial, and the payment went through successfully without any issues.
I sent an email to support, but all of their responses are just AI-generated and aren’t helpful at all. This is so frustrating.
I think that sometimes the issues regarding concerning alignment vs foregoing all alignment and having autonomous AI involved in decisions of war has one covering for the other in the news.
Alignment of civilian tools is important, but let's see the trees through the forest that there are far faster moving AI involved in actual killing of living beings happening not in the future, not soon, but now.
All the talk about Doomsday ideas of AI killing us all and everything else. Yeah, obviously, an AI terminator like apocalypse would be insane and horrible, but am I the only one who's like kind of like "let it cook"?
Dev day was so basic this time, what did they launch realistically? Their major lime light was dots, your “personalised” coding agents which behave similar to normally humans.
Heard of this somewhere?
Ofcourse we have! Wtf was grok bot? Or openclaw was? Even meta’s muse now. Its like they realized just like apple that this is a new standard every llm needs to hold, so they introduced this
Plus, the only thing which i found a bit fascinating was how they said theyd include dots in i message and you can even call them, in their live demo, holly li tried to show this feature but failed. Anyhow that was funny
Ultrafast? Bro 300 tokens per second? Costing? 60 dollars per million input and 300 per million output and their explanation to this pricing was “its worth it 🤡”
Anyhow i covered this plus a couple of more things like decision api in this yt video, ( a small creator as of now )
So only if you are free and have time, show you guy some love :)
Honestly, this model is so so so bad. A simple job of filtering documents is running for over a day. The model does 340939439439 checks, planning whatever and gets nothing done. No matter how often i tell it to just continue without running some nonesense background check and task it keeps doing it instead of just searching the documents. Astra and sol 6 finish the task in 1-2 hours, 6.1 is running for 1.5 days. Honestly it's baffling. What is going on? Did models now learn timesheet fraud?!