OpenAI Outlines Policy for Pacing Model Development Around Cyber-Critical Capabilities

OpenAI published a new policy framework explaining how it intends to deliberately pace the release of models that approach or cross thresholds for cyber-critical capabilities. The document identifies specific capability classes — particularly those with offensive cyber potential — where the company says it will slow deployment timelines or impose additional restrictions rather than shipping on a standard cadence. This is a direct response to growing scrutiny over whether frontier labs are releasing models faster than safety and security validation can keep up. For developers and security researchers, this framework signals that some future model capabilities may be gated, delayed, or released only to vetted partners, which has implications for access timelines and API availability. The policy also provides a rare look at how OpenAI internally categorizes risk tiers for emerging capabilities.