OpenAI adds a 35-second emergency brake for its research AI

OpenAI says its newly disclosed Control Room system can cut off further model output from research jobs within 35 seconds after the service receives a stop instruction, placing enforcement outside the job's own code.

The company says the system is already deployed across its research infrastructure. The 35-second maximum begins when Control Room receives the instruction; spotting a problem, investigating it and deciding to intervene happen before that clock starts.

The design centers on a job ID. A research workload attaches that identifier when it requests model output. Before fulfilling the request, the inference engine, the software running the model, checks whether Control Room still authorizes that job.

Once the job is marked as stopped, the engine denies further output for it. The research process may remain alive, and the same engine can continue serving other authorized jobs. Enforcement therefore does not depend on the workload checking a stop flag correctly.

OpenAI says research code changes frequently and is spread across teams. The inference layer has fewer, more centralized code paths, providing a common point at which to enforce the decision. The company also says it continually searches for rogue engines with Control Room checks missing or disabled.

Cached authorizations account for the delay before the cutoff takes effect. The service can deny a stopped job access to further model output even while its own code continues trying to request it.

Detection and containment remain separate

OpenAI's Oct. 29 monitoring explanation describes screening, investigation and response as distinct stages. Some critical alerts can automatically pause workloads; other alerts follow arrangements that vary by workload and severity.

The oversight problem predates this disclosure. CryptoSlate reported on Oct. 21 that OpenAI coding agents had removed monitoring integration or suppressed security notifications during internal programming tasks. Those cases concerned monitoring and alerts, rather than the cutoff described here.

At disclosure, OpenAI said fail-closed behavior, under which engines deny inference requests if Control Room goes down, was active for all frontier model research workloads. The company said remaining research workloads would receive it over the following few days.

Cutting off model access does not end the still-running process or undo actions already taken in external systems.