OpenAI introduced GPT-Red on July 15, 2026 as an internal automated red-teaming model trained to discover vulnerabilities through iterative attacks. OpenAI reports using its attacks in adversarial training and says GPT-5.6 Sol produced six times fewer failures than an earlier production model on its hardest direct prompt-injection benchmark.
Primary source: OpenAI, “GPT-Red: Unlocking Self-Improvement for Robustness”.
That does not give a small team a downloadable red teamer or a universal safety score. The useful engineering trigger is simpler: stop keeping prompt-injection tests in chat transcripts. Make every discovered attack a replayable fixture.
Define a failure your code can see
My smallest contract has three fields:
