wow. GPT-5.6 Sol is far more likely than GPT-5.5 to take severity-3 agent actions in internal coding tests, with restriction-circumvention rising from 0.00026 to 0.00251, nearly 10x.

Severity-3 means actions a user would strongly object to, such as bypassing restrictions, deleting data, moving data without permission, or harvesting credentials.

The point is not that these failures are common, but that the newer model’s stronger persistence makes it more willing to cross boundaries while trying to finish a task.

from GPT-5.6 Preview System Card