Looking back · deep dive, September 6, 2026

OpenAI's gate fails weak targets; utilities weren't tested

"How long will this security gate hold?" has no single answer; it depends on who is being defended against. The security gate is OpenAI's practice of offering its strongest security capabilities only to vetted defenders; how long the gate holds depends on how fast open-weight models outside it catch up. On September 3 OpenAI put US$1B of usage credits toward water utilities, power grids, local governments and community banks, to be used within six months. It is tempting to read the subsidy together with "open weights are only months behind" as "the gate has six months left." But the subsidy deadline and the "only months behind" claim share no common unit. Both also come from OpenAI, through the same application portal. What the September 6 deep dive found solid were two readings from the joint UK-US government evaluation of July 23. Against well-defended targets, the latest open-weight flagship at the time gained control of code execution in 0 of 41 attempts, against 20 of 41 for a frontier model. The same evaluation, though, says that open-weight flagship could already attack weakly defended small-business systems on its own (deep dive, 2026-09-06). Our reading: some of the water utilities, power grids, local governments and community banks the subsidy names may be exactly such weakly defended systems. The evaluation tested small-business systems, not those organizations directly. So "how long the gate has left" needs separate answers by the target's level of defense. For well-defended targets, the July evaluation shows the gate still holding. For weakly defended small-business systems, the evaluation shows it no longer held as of July 23. Read with Model watch item 3: the GLM-5.3 model card's self-reported scores, close to closed flagships at finding vulnerabilities and still behind at writing exploits, are one more reading on the same list waiting to be checked. A model card's self-reported scores and the UK-US government evaluation are not the same yardstick. How we checked →

Concept illustration: in the centre, an orange-red gate with vertical bars is fixed to a post by two dark hinges and stands at an angle, with a tall, narrow pale cone behind it; on the left of the post, a person with long dark hair walks forward in a long black coat, black trousers and white sneakers, with a white card on a lanyard, while on the right another person with short dark hair, in a black turtleneck, black trousers and white sneakers, rests one hand on top of the gate and looks down toward them. Against a light wall and floor, the left desk holds a laptop whose screen shows a speech bubble with grey lines, and the right desk holds a laptop facing away, its lid lettered OPENAI; each desk has a grey office chair, and the upper right of the wall shows an interlaced knot-like symbol beside large lettering reading OPENAI.

Source and checks

This item ran in the brief of Oct 16, 2026, alongside 19 other items. How we checked it, the quote checks and what was still missing that day are on that issue's How we checked page.

Cite this item

SecondSource (2026). "OpenAI's gate fails weak targets; utilities weren't tested." https://secondsource.io/en/news/2026-10-16-9/. Accessed access date.