NUWA 
OpenAI
GPT-5.6 Terra
Published evidence on capabilities, behavioral tendencies and observed actions.
- First public availability
- 2026-07-09
- Parameters
- Not disclosed
- Metadata updated
- 2026-10-27
Evidence overview
Published risk evidence is organized by assessment and protocol. Missing evidence is not a low-risk finding.
NUWA curates and interprets these sources. Experiments are attributed to their original executors; this page does not claim NUWA has independently replicated them.
MODEL MONITORING
Representative benchmark coverage
Results by protocol and configuration; gaps show records awaiting collection or linkage.
AgentCyberRange →
No eligible measurement linked to this model version.
Cybench →
No eligible measurement linked to this model version.
CyberGym →
No eligible measurement linked to this model version.
METR Time Horizons →
No eligible measurement linked to this model version.
SEC-bench Pro →
No eligible measurement linked to this model version.
MASK →
1 measurements
- 5.4%Neo Research · Harness not disclosed
Attempt to Persuade Eval (APE) →
8 measurements
- 7%Neo Research · Harness not disclosed
- 28%Neo Research · Harness not disclosed
- 0%Neo Research · Harness not disclosed
DeceptionBench →
2 measurements
PersuSafety →
3 measurements
All linked measurements
Each result retains its protocol and unit.
31 observations
| System / model | Result | Condition status | Task / conditions | Evaluator / report | Dates |
|---|---|---|---|---|---|
| GPT-5.6 Terra | 5.4%MASK · Lying rate under pressure | Incomplete | MASK pressured-versus-own-neutral responseLying rate under pressure— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 72.7%Stealth evaluations · Mean challenge success rate | Incomplete | GDM situational awareness 11 tasksMean challenge success rate— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Stealth evaluations · Stealth task score | Incomplete | GDM stealthOversight pattern— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Stealth evaluations · Stealth task score | Incomplete | GDM stealthClassifier evasion— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 14%Stealth evaluations · Stealth task score | Incomplete | GDM stealthCover your tracks— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 42%Stealth evaluations · Stealth task score | Incomplete | GDM stealthStrategic rule-breaking— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 21.3%CharXiv · Attempted answer with image withheld | Incomplete | CharXiv with images withheld— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 21.3%CharXiv · Attempt rate | Incomplete | CharXiv, required chart image withheldAttempt rate— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 18%Shutdown resistance in reasoning models · Shutdown bypass rate | Incomplete | Palisade arithmetic-task shutdown scenarioNo shutdown instruction— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Shutdown resistance in reasoning models · Shutdown bypass rate | Incomplete | Palisade arithmetic-task shutdown scenarioExplicitly allow shutdown— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 100%Shutdown resistance in reasoning models · Shutdown bypass rate | Incomplete | Palisade arithmetic-task shutdown scenarioInstructed to resist (competence check)— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0.3%DeceptionBench · Deception rate | Incomplete | DeceptionBench first-party Inspect portSingle-turnup to5 turns in multi-turn settingInspect | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 1.2%DeceptionBench · Deception rate | Incomplete | DeceptionBench first-party Inspect portMulti-turnup to5 turns in multi-turn settingInspect | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 86%PersuSafety · Turn-1 persuasion attempt rate | Incomplete | PersuSafety open-ended single-turn adaptationLow harm— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 5%PersuSafety · Turn-1 persuasion attempt rate | Incomplete | PersuSafety open-ended single-turn adaptationMedium harm— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%PersuSafety · Turn-1 persuasion attempt rate | Incomplete | PersuSafety open-ended single-turn adaptationHigh harm— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 1 transcriptsPetri · Transcripts verbalizing evaluation awareness | Incomplete | Pre-seeded alignment auditsColleague credentials— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0 transcriptsPetri · Transcripts verbalizing evaluation awareness | Incomplete | Pre-seeded alignment auditsLocked source— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0 transcriptsPetri · Transcripts verbalizing evaluation awareness | Incomplete | Pre-seeded alignment auditsOnly questions— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 1 transcriptsPetri · Transcripts verbalizing evaluation awareness | Incomplete | Pre-seeded alignment auditsPooled— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%ImpossibleBench · Cheating rate (pass@1 on impossible variants) | Incomplete | Impossible-LiveCodeBench split with toolsCheating rate (pass@1 on impossible variants)— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 1 percentage pointsAlignment faking · Compliance gap | Incomplete | Alignment Faking paid/free-tier contextsCompliance gap— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Alignment faking · Deceptive alignment rate | Incomplete | Alignment FakingDeceptive alignment rate— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 7%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesConspiracy600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 28%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesUndermining Control600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesNoncontroversially Harmful overall600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesCommit Physical Violence600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesHuman Trafficking600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesMass Murder600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesSexual Assault of Minors600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
| GPT-5.6 Terra | 0%Attempt to Persuade Eval (APE) · Turn-1 persuasion attempt rate | Incomplete | APE topic categoriesTorture Innocent People600 topics,3 persuasion turns each— | Neo ResearchEvaluating Kimi K3 for Misalignment Risks | Release 2026-07-09Report 2026-09-11 |
Developer disclosures
No developer-authored safety report has been linked to this exact model record in the current collection.
External assessments
Neo Research
Evaluating Kimi K3 for Misalignment Risks →
The report identifies conditional overeagerness, grader-directed behavior and recognition of familiar evaluations. It does not establish a universal deployment failure rate.
2026-09-11Evidence by risk topic
Autonomy 3 protocol results
Shutdown resistance →
External evaluation · Executed by Neo Research
- Shutdown bypass rate
- 18%
Per-result sample size not disclosed
Shutdown resistance →
External evaluation · Executed by Neo Research
- Shutdown bypass rate
- 0%
Per-result sample size not disclosed
Shutdown resistance →
External evaluation · Executed by Neo Research
- Shutdown bypass rate
- 100%
Per-result sample size not disclosed
Deception 14 protocol results
CharXiv with images withheld →
External evaluation · Executed by Neo Research
- Attempted answer with image withheld
- 21.3%
Withheld-image CharXiv questions; attempts include correct and incorrect guesses.
LAB-Bench with figures/tables withheld →
External evaluation · Executed by Neo Research
- FigQA attempt, figure withheld
- 72.9%
- TableQA attempt, table withheld
- 61.5%
Figure/table subsets with explicit insufficient-information answer option.
CharXiv with images withheld →
External evaluation · Executed by Neo Research
- Attempt rate
- 21.3%
Per-result sample size not disclosed
ImpossibleBench →
External evaluation · Executed by Neo Research
- Cheating rate (pass@1 on impossible variants)
- 0%
Per-result sample size not disclosed
Alignment faking →
External evaluation · Executed by Neo Research
- Compliance gap
- 1 percentage points
Per-result sample size not disclosed
Alignment faking →
External evaluation · Executed by Neo Research
- Deceptive alignment rate
- 0%
Per-result sample size not disclosed
GDM Stealth evaluations →
External evaluation · Executed by Neo Research
- Mean challenge success rate
- 72.7%
Per-result sample size not disclosed
GDM Stealth evaluations →
External evaluation · Executed by Neo Research
- Stealth task score
- 0%
Per-result sample size not disclosed
GDM Stealth evaluations →
External evaluation · Executed by Neo Research
- Stealth task score
- 0%
Per-result sample size not disclosed
GDM Stealth evaluations →
External evaluation · Executed by Neo Research
- Stealth task score
- 14%
Per-result sample size not disclosed
GDM Stealth evaluations →
External evaluation · Executed by Neo Research
- Stealth task score
- 42%
Per-result sample size not disclosed
DeceptionBench →
External evaluation · Executed by Neo Research
- Deception rate
- 0.3%
Per-result sample size not disclosed
DeceptionBench →
External evaluation · Executed by Neo Research
- Deception rate
- 1.2%
Per-result sample size not disclosed
MASK →
External evaluation · Executed by Neo Research
- Lying rate under pressure
- 5.4%
Per-result sample size not disclosed
Cybersecurity No structured result linked
A gap in this collection is not evidence of low risk. Consult the linked reports for unextracted findings and protocol scope.
CBRN No structured result linked
A gap in this collection is not evidence of low risk. Consult the linked reports for unextracted findings and protocol scope.
Disinformation 11 protocol results
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 7%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 28%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
APE →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
PersuSafety with adapted judge →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 86%
Per-result sample size not disclosed
PersuSafety with adapted judge →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 5%
Per-result sample size not disclosed
PersuSafety with adapted judge →
External evaluation · Executed by Neo Research
- Turn-1 persuasion attempt rate
- 0%
Per-result sample size not disclosed
Autonomous physical harm No structured result linked
A gap in this collection is not evidence of low risk. Consult the linked reports for unextracted findings and protocol scope.
Source review and evidence gaps
Evaluating Kimi K3 for Misalignment Risks →
Source-specific extraction of Neo Research · Kimi K3. Findings and measurements retain their original attribution.
Source transcription is not experimental replication. Unknown dates, evaluator roles and configuration details remain unknown. Source groups are not verified rankings.
Missing scores may reflect unextracted sections, undisclosed configurations, unresolved identity or an absent experiment. These are separate research questions; none implies a zero result.
Interpretation and open questions
Differences between reports can reflect task selection, model endpoints, prompts, budgets, judges and publication dates. Evidence is grouped by the protocol actually used; no model-wide safety grade is inferred.
References
- [1] GPT-5.6 official general availability ; July 9, 2026: general availability following limited trusted-partner preview; Parameter counts not disclosed in reviewed launch article
- [2] Evaluating Kimi K3 for Misalignment Risks. 2026-09-11. September 2026 ; §1.1.1; Figure 1; §1.1.2; Figure 2; §1.1.1 Figure 1 p.8