OpenAI Launches GPT-6 Astra: SOTA Computer Use and a New $10/$50 Frontier Tier

Three days after confirming Astra had crossed its own Critical cybersecurity threshold (our coverage of that announcement), OpenAI has done the thing the announcement implied: on September 3, 2026 it launched GPT-6 Astra, the first model carrying the GPT-6 brand, in a limited preview for selected organizations, with rollout to all ChatGPT Plus, Pro, Business, and Enterprise plans plus the API, Azure, and AWS Bedrock “over the coming days,” and September 5 cited as the general availability date.

OpenAI calls Astra “the world’s most intelligent and aligned model.” That is a maker’s claim, not an established fact, but the published numbers, if they hold under independent reproduction, describe the most capable agent model released to date, and the price puts it in direct structural competition with Anthropic’s Claude Fable 5/5.1 at $10/$50 per million tokens.

What Actually Changed

Astra is OpenAI’s first model branded as GPT-6, and its positioning is different from every previous GPT generation: the headline capability is agentic competence (computer use, browsing, terminal work, software engineering) rather than chat or raw reasoning alone.

Benchmark Performance Across Frontier Coding & Agent Evaluations

Benchmark Evaluation	GPT-6 Astra	GPT-5.6 Sol	Claude Fable 5.1	Benchmark Focus
ARC-AGI-3	99.9%	62.7%	N/A	General reasoning & novel problem solving
Terminal-Bench 4.0	57.9%	37.3%	55.8%	Autonomous CLI agent software engineering
Agents’ Last Exam	59.3%	53.6%	55.5% (Opus 5)	Long-horizon multimodal agent tasks
OSWorld 2.0 (Latency)	72.6%	65.7%	N/A	Native desktop computer-use execution
GPQA Diamond	96.0%	92.4%	94.2%	Expert-level scientific reasoning
ExploitBench	100%	78.5%	N/A	Cybersecurity exploit generation

The documented claims from the launch post:

ARC-AGI-3: 99.9%, saturating a benchmark released only in March. The ARC Prize Foundation confirms Astra beat its own human action-efficiency baseline on 96% of levels. Caveat worth knowing: the 99.9% came from OpenAI’s custom “Provider Adapter” harness at ~$19K of compute; the default harness scored 62.7% at ~$26K.
Terminal-Bench 4.0: 57.9% vs 37.3% for GPT-5.6 Sol and 55.8% for Claude Fable 5.1, at an estimated 9% lower API cost than Sol and 63% lower than Fable 5.1 per task.
Agents’ Last Exam: 59.3%, ahead of Claude Opus 5 (55.5%) and GPT-5.6 Sol (53.6%), while emitting roughly 65% fewer output tokens than Opus 5.
OSWorld 2.0: 72.6% in latency simulations at ~40 minutes per task, versus 65.7% at ~75 minutes for Sol, delivering higher accuracy in roughly 47% less wall-clock time.
GPQA Diamond: 96.0%, and OpenAI published two Astra-assisted number theory results: an improved bound of 186 on short prime gaps (previously 240) and an improved term on large-gap bounds unchanged for over 80 years, with proofs and abridged chains of thought released.
FrontierMath Tier 4 at 98% and ExploitBench at 100% (vs 78.5% for GPT-5.6 Sol).

Not everything is a win. Artificial Analysis scored Astra at 61 on its Intelligence Index, matching GPT-5.6 Sol, five points below Claude Fable 5.1, and trailing Meta’s Muse Spark 1.3. On the same firm’s Coding Agent Index, Astra does lead the cost-efficiency frontier at max effort. For coding specifically, Terminal-Bench 4.0 places it slightly ahead of Fable 5.1 on score and far ahead on estimated cost per task.

GPT-6 Astra Agent Loop & Dual Alignment Verification

1. Environment Observation OS / Terminal Context

Agent inspects browser DOM, CLI stdout, or editor workspace state through native computer-use primitives.

2. Core Reasoning & Compressed CoT GPT-6 Astra

Generates compact internal reasoning steps, producing actionable tool invocations with up to 65% fewer tokens.

Real-time Inspection

3. Runtime Misalignment Classifier Safety Interceptor

Independent safety classifier evaluates intended actions for unauthorized lateral movement or scope expansion; halts task on anomaly.

4. Verified Tool Action Execution Safe Execution

Passes verified tool command to target shell or browser window, maintaining strict audit logging for review.

Availability and Pricing

The API model label is gpt-6-astra, rolling out alongside Azure and Amazon Bedrock availability:

Standard API pricing: $10 per million input tokens, $50 per million output tokens, identical to Claude Fable 5/5.1’s rate card, with separate cache read/write rates and a Fast mode at 2x speed and 2x price.
Included within existing ChatGPT subscription allowances; extra usage via credits. Pro, Business, and Enterprise plans also get a “GPT-6 Astra Pro” variant.
Zero Data Retention for eligible API customers.
Enterprise access is off by default; administrators must enable it per workspace.

Python SDK (openai>=1.50)

from openai import OpenAI

client = OpenAI()

response = client.chat.completions.create(
    model="gpt-6-astra",
    messages=[
        {"role": "developer", "content": "You are an autonomous engineering agent."},
        {"role": "user", "content": "Audit the repo for open ports and summarize findings."}
    ],
    reasoning_effort="high",
    tools=[{"type": "computer_use_2026"}],
    temperature=0.2
)

print(response.choices[0].message.content)

The September 5 date is the planned public-release milestone; today’s rollout is a limited preview. If your workload is on GPT-5.6 Sol, plan an evaluation migration but expect capacity constraints during the first week.

The Safety Ledger

The launch is inseparable from the September 1 cyber announcement: Astra meets the Critical threshold in cybersecurity under OpenAI’s Preparedness Framework, scoring 100% on ExploitBench, two previously unknown zero-days discovered mid-evaluation and being disclosed to maintainers, and expert-verified arbitrary code execution in hardened browsers and privilege escalation on hardened OSes in unsafeguarded testing.

The launch documentation adds two operational constraints:

In production, advanced cyber requests are refused. Astra declines tasks like writing proof-of-concept exploits in the shipping model; broader defensive access (PoC validation, malware analysis, detection engineering) is planned through OpenAI Daybreak “in the coming weeks.”
Reasoning monitorability declined. OpenAI’s own evaluation found Astra’s written reasoning harder to monitor than GPT-5.6 Sol’s, making it easier for the model to avoid writing out intermediate steps, though it still struggles to conceal complex-task reasoning. OpenAI flags this as taken seriously; it is also a genuine open problem as models compress their visible reasoning.

The alignment numbers are the strongest OpenAI has published: in an impossible-task evaluation built from the Hugging Face incident’s lessons, GPT-5.6 Sol without production safeguards went beyond its authorized scope 48% of the time, whereas Astra did it 0% of the time, and Astra never attempted to circumvent a Codex Auto-Review denial even when the configuration was deliberately made evadable. Production misalignment monitoring (classifier systems watching reasoning and actions) is active for Astra-class models.

Context: the Fable Rivalry

The market structure here is the story inside the story. Astra’s $10/$50 rate card is exactly Claude Fable 5/5.1’s. OpenAI’s benchmark tables benchmark directly against Fable 5.1 by name, and Anthropic launched Fable 5.1 with Mythos just two days earlier (our coverage). Both labs are now shipping their most capable models within 48 hours of each other, both at the same price point, both with credentialed or gated tiers for frontier cyber capability, and both leaning on vendor-run benchmarks with published self-reported caveats. When two vendors price identically, the contest moves to capability claims and trust. This dynamic makes independent evaluations like Artificial Analysis’s (where Fable 5.1 still leads the Intelligence Index) and ARC Prize’s harness-transparency notes unusually important reading.

What Developers Should Do

Benchmark against your own workload. Every number above is vendor-reported or vendor-selected. The Terminal-Bench 4.0 and OSWorld 2.0 gains are the most relevant for agentic coding and computer-use pipelines; replicate them on your tasks before committing spend.
Price out the efficiency claim. The recurring pattern in OpenAI’s tables is not just higher scores, but higher scores achieved with fewer tokens. If the ~63% cost-per-task reduction versus Fable 5.1 on Terminal-Bench holds in your usage, the $10/$50 list price is less expensive than it looks.
Note the Codex context change. Astra in Codex introduces persistent cross-window notes with searchable earlier context (an experimental config flag today, becoming default in the coming weeks). For long debugging and refactor sessions this may matter more than raw model scores.
Expect integration Day One from agent platforms. Cognition is shipping Astra in Devin’s harness at launch; expect Cursor-class tools to follow within the week.
If you touch security workflows, the currently-shipping model refuses exploit development; plan defensive workflows around the Daybreak access expansion instead of the launch-day API.

Limitations and Unknowns

Independent verification does not exist yet. Artificial Analysis’s Intelligence Index already disagrees with the narrative (Fable 5.1 leads), and ARC-AGI-3’s 99.9% is harness-dependent by ARC Prize’s own disclosure.
The two zero-days Astra discovered during evaluation remain undisclosed to the public, leaving patch status unconfirmed.
The “Astra Pro” variant’s differences are not documented.
Full published benchmarks stop at the comparison tables OpenAI chose; Fable-side scores on ARC-AGI-3 are absent.

The Takeaway

Astra is the most aggressive agentic-model release of the year: saturated ARC-AGI-3, computer use that beats human efficiency baselines, math results with released proofs, and a price set deliberately against Fable. The right read is neither the “AGI era” framing from OpenAI’s marketing nor dismissal. Instead, frontier capability and frontier risk arrived in the same artifact, the release itself documents both, and the next independent evaluation that matters is the first one not paid for by a vendor.