Astra hits 29.2% in AISI supply-chain test

Earlier, the archive argued that Astra’s Critical cybersecurity rating justified restricted access and independent scrutiny in its gated-release analysis. The UK AI Security Institute now reports that GPT-6 Astra completed a supply-chain attack in 29.2% of simulated runs, versus 6.3% for GPT-5.6 Sol and 0% for GPT-5.5, with explicit scope reducing Astra to 4 of 49 trajectories in a smaller test published by AISI. The verdict holds and hardens: teams giving agents tool access should use explicit allow-lists and external containment, not treat model instructions as a security boundary.