It stopped going past what it was asked
The question that stops an AI tool getting near a live job is never whether it is clever. It is what happens on the run where it misreads the brief and carries on anyway, at two in the morning, in a system somebody has to answer for. This week that question got a published number against it.
Written up on 28 September, covering the week of 4 September. Every figure below was read at the publisher on 28 September.
The scope number is the one to read first
What shipped. OpenAI released GPT-6 Astra on 3 September, generally available the following day. Alongside the capability claims they published a scope test: given a task that is difficult or impossible, does the model go beyond the target it was authorised to touch. Their previous model did, in 48 per cent of cases without production safeguards. Astra did in none.
Where it lands. That is the number a contractor should care about, and it is buried under the benchmark scores. An agent allowed to read a project folder and update a register is useful. The same agent deciding on its own that the neighbouring folder looks relevant is an incident, and on a live project it is an incident somebody has to disclose. Nought per cent is not a guarantee on your systems with your data. It is the first time the failure has been measured and published at all.
Monday morning. If anyone in your business is piloting an agent, write down today what it may read and what it may change, before you look at any model. The scope is yours to set and no release will set it for you.
Faster and better at once, which is new
What shipped. On OSWorld 2.0, a test of long computer-use workflows, Astra scored 72.6 per cent at roughly 40 minutes per task against its predecessor's 65.7 per cent at roughly 75 minutes. About 47 per cent less time for a higher score.
Where it lands. Until now these moved against each other: the careful setting was slow and the quick setting was worse. Work that was not worth automating because it took the machine longer than the person is worth pricing again. Collating a handover pack, chasing missing certificates through a folder tree, reconciling a delivery log against a register: all tedious, all checkable, all now inside a working morning rather than a working week.
Monday morning. Pick the job in your week you would never give to a graduate because explaining it takes longer than doing it. That is the shape of task this changed, and it is the one worth timing honestly.
It can now search its own toolbox
What shipped. The model card lists what Astra can call: web search, file search, computer use, a hosted shell, the Model Context Protocol, and a tool search that lets it pick from its own available tools rather than being handed a fixed list. The window is 1,050,000 tokens, with a knowledge cutoff of 30 April 2026.
Where it lands. Searching stopped being something you do before you ask and became a step inside the model's own loop. That is why the cutoff matters: the gap between what a model knows and what is true on your job is exactly the gap a search is there to close, and it can only close it against information it is allowed to reach.
Monday morning. Ask where your project information actually lives. A model that can search everything is worth nothing if the record of the job is on four people's phones.

| What it can call | What that means | Where it bites on a project |
|---|---|---|
| Web search | Looks things up itself, mid-task | Answers can be current, and can also be confidently wrong |
| File search | Reads a body of documents you point it at | Only as good as what is actually filed |
| Computer use | Drives applications and a browser | Needs a written boundary before it gets one |
| Model Context Protocol | Connects to your own systems through a standard | Scope it to a folder, never to the estate |
What to write down before you let one near anything
The releases are ahead of most people's governance, and the gap is not technical. It is that nobody has written down what the thing may touch.
If you are being asked to approve an agent this quarter and the paper in front of you does not say what it may read, what it may change and who signs off, that is a twenty minute conversation.
Sources
Every figure and price in this edition was read from the page linked below on 28 September 2026. Where a number could not be confirmed at its publisher, it is not in the edition.
Followed this week
Where the week was picked up. Every figure and price above was then checked at the publisher and drawn from that source, so no chart here is traced off a video.