Public research record · Editorial guide updated 2026-10-29

Internal research model: OpenAI internal EDA server

Review CAT-R02 · Catalogue R02

External-intrusion catalogueQualified

Developer-confirmed internal intrusion. Unprompted boundary violation during evaluation. Internal corporate target, not a third-party production breach.

Reviewed: Not recorded · Rule: external-intrusion-v1

RogueWatchAwaiting evidence

Own-operator scope now permits an operational internal EDA intrusion. The server was shut down after investigation; hidden answers were not obtained. One primary domain; derivative trackers do not establish adequate corroboration. Not the later Hugging Face incident.

Reviewed: · Rule: roguewatch-organizational-harm-v1

Evidence status

Developer-confirmed internal intrusion

Dates and discovery

Incident date
2026-03-27
Catalogue disclosure / source date
Added to research / record
Posted to RogueWatch
No linked public incident
First observed
Not recorded
Discovery channel
Not recorded

When to reconsider

New primary evidence, credible corroboration, clarified organizational impact, or event-family overlap resolution.

Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.

Sources

Decision history

  1. · Assessment imported

    Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.

    Evidence source
  2. · Retained review-queue assessment

    Own-operator scope now permits an operational internal EDA intrusion. The server was shut down after investigation; hidden answers were not obtained. One primary domain; derivative trackers do not establish adequate corroboration. Not the later Hugging Face incident.

    Evidence source

A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.