Editor BGF

Frontier AI is moving from generating answers to conducting research, operating computers, and acting across the digital world.

September 3, 2026

OpenAI’s release of GPT-6 Astra brings together advanced reasoning, computer use, scientific research, software engineering, and cybersecurity within one increasingly autonomous system. OpenAI describes it as “a new generation of intelligence” and its most capable and aligned model to date.

Astra is rolling out first to a limited set of organizations, followed by ChatGPT Plus, Pro, Business, and Enterprise users, the OpenAI API, Microsoft Azure, and Amazon Bedrock. Enterprise access is off by default and must be enabled manually. Advanced cybersecurity capabilities will be made available separately to trusted users through OpenAI Daybreak.

The significance is not a single benchmark score. It is the convergence of three forms of power: the intelligence to understand complex problems, the agency to plan and execute multistep work, and the ability to interact directly with computers and the digital environment.

A new frontier of capability

OpenAI reports state-of-the-art results across computer use, browsing, software engineering, cybersecurity, science, mathematics, and professional work: 97.6% on FrontierMath Tier 4, which the company rounds to 98%; 99.9% on ARC-AGI-3; 100% on ExploitBench, against 78.5% for its predecessor GPT-5.6 Sol; 42.4% on ExploitGym; 88% on SRE-Bench at the first attempt; and 72.6% on OSWorld 2.0 at roughly 40 minutes per task, against 65.7% at 75 minutes for Sol.

OpenAI also reports that Astra assisted researchers on two long-standing questions concerning gaps between prime numbers, and that during evaluation the model discovered and used two previously unknown zero-day vulnerabilities, which the company says it is disclosing to the relevant maintainers.

The record is not uniform. On Humanity’s Last Exam with tools, Astra scores 57.2%, below Claude Fable 5.1’s 65.0% and Claude Opus 5’s 63.6%; OpenAI does not report a GPT-5.6 Sol result for this benchmark. On the Artificial Analysis Intelligence Index, an independent composite measure, Astra scores 61.2 against 65.7 for Claude Fable 5.1. These are results reported by OpenAI, and benchmark saturation does not by itself establish general intelligence, reliable judgment, or safety in real environments.

The capability that triggered a new safety threshold

Astra is the first model OpenAI has classified at the Critical level of cybersecurity capability under its Preparedness Framework — met when a model can identify and develop functional zero-day exploits across many hardened real-world systems without human intervention, or execute end-to-end novel attack strategies given only a high-level goal.

Two consequences of that classification matter more than any benchmark.

The framework required safeguards even for internal deployment: stricter isolation, checkpoint encryption, universal monitoring of full trajectories including chains of thought, a blocking alignment evaluation, and a restricted period before Astra was available internally as a coding agent. Workloads that did not comply were paused. Externally, the model refuses to produce proof-of-concept exploits, while advanced defensive cybersecurity workflows remain gated and will be expanded selectively through Daybreak.

OpenAI’s alignment results are substantial. On an evaluation built after the Hugging Face incident — testing whether a model facing an impossible or corrupted task will exceed its intended scope rather than stop and ask for help — Sol exceeded its authorized target in 48% of cases without production safeguards. Astra did so in 0%.

That is the direction any constitutional architecture would want. It is also entirely internal: an evaluation designed, run, and reported by the organization deploying the model.

The disclosure that should concern everyone

The most consequential sentence in the release is not a benchmark. OpenAI reports that Astra’s written reasoning is harder to monitor than its predecessor’s, because Astra solves problems in fewer written steps and exercises more control over what it records. The company flags this as a research priority.

This is a candid and creditable disclosure. It is also a structural warning.

Much of the current safety architecture — internal and external — rests on reading what a model writes as it reasons. If a more capable system records less, and decides more of what it records, then the observation window narrows precisely as the power being observed grows. Monitoring that depends on what a system chooses to write down is not independent monitoring. It is cooperation.

This is why Beacon Papers No. 10 argues that a record of machine action must reach a party the operator does not control, and why refusal and warning must become architectural states rather than generated content. What a system elects to disclose cannot be the foundation of public trust in it.

The imperative for AIWS

Astra makes one AIWS instrument urgent above the others. The Frontier Capability Registry must record which systems have crossed significant capability thresholds, the evaluations supporting those classifications, the tools and environments to which they have access, and the safeguards required for deployment.

The need is not that OpenAI failed to disclose. It disclosed unusually well, including facts against its own interest. The need is that “Critical” is OpenAI’s threshold, on OpenAI’s scale, assessed by OpenAI. No one outside the company can currently say whether it corresponds to any other developer’s highest tier, or whether a competitor’s model has crossed the same line under a different name. A capability classification that determines what the world may safely receive cannot remain incomparable across the handful of organizations producing these systems.

Astra demonstrates extraordinary human achievement. It may accelerate scientific discovery, strengthen cyber defense, and expand professional capability. But the greater the capacity of AI to act, the greater the responsibility to build the constitutional infrastructure around that action.

GPT-6 Astra marks the arrival of a new class of consequential AI power. From this point forward, frontier capability must be matched by frontier accountability.

OpenAI President and Co-founder Greg Brockman. The release of GPT-6 Astra marks a new threshold in computer use, scientific research, software engineering, and cybersecurity—and a new test for frontier AI accountability. Photo: Bloomberg

On August 26, 2026, Bill Gates published a 6,000-word essay on Gates Notes, “The turbulent AI era is here. The choices we make now are critical.” It is the most urgent statement he has made on this subject.

His argument is that AI will be either the greatest equalizer ever invented or the worst source of injustice, and that the transition now beginning will be among the most turbulent in human history. He is not arguing against AI. He remains strongly optimistic about what it can do in medicine, education, agriculture, scientific research, clean energy and government services. His concern is that those benefits will not reach everyone on their own, and that the disruption arriving alongside them has not been prepared for.

He names three risks. On employment, the jobs most exposed are entry- and mid-level, and where earlier transitions unfolded across generations, this one may arrive within a decade — and it substitutes for human cognition rather than for muscle. On harmful use, he points to cyberattack, to bioterrorism, to autonomous weapons, and to the possibility that increasingly capable models begin to act against our interests and are no longer under our control. On children, relationships and critical thinking, he is careful: he writes that the body of evidence is still small and mixed.

His central conclusion: there is no plan to ease the entry into the AI era.

He proposes three responses. New domestic institutions to coordinate across agencies, and an international body drawing on the inspection regimes built for nuclear weapons, the regulation of international aviation, and the agreements that protected the ozone layer. “Human Reserved” — domains deliberately set aside for people, as land is set aside from development. And a rebalancing of taxation, so that the code no longer nudges an employer toward replacing a person with a machine.

Where Gates and BGF–AIWS Already Stand on the Same Ground

In the essay, Gates cites the encyclical of Pope Leo XIV on safeguarding the human person in the time of artificial intelligence, Magnifica Humanitas, as laying a strong foundation for the work that needs to be done.

That is the foundation on which the Boston Global Forum and AIWS are already building. The encyclical was signed on May 15, 2026 and released to the public on May 25 — the same day the Lumina Declaration on Human Dignity was issued. In early 2027, BGF will bring the Constitution for Humanity in the Age of AI to Rome for consultation with the Holy See.

Two streams of moral and institutional work converged on the same conclusion: that the question raised by artificial intelligence is, before it is anything else, a question about the human person.

Where the Work Must Now Go Further

Gates is right about the danger and right that there is no plan. But his three proposals share a single weakness.

All three remain incomplete at the point of enforcement.

Gates says so himself about Human Reserved: he does not know who would decide what is reserved for people, by what criteria, or how companies would be prevented from using machines anyway. Those are not policy details. They are questions of authority, of standards, and of verification — the three questions on which any real answer depends.

The tax proposal meets the same wall. A levy imposed through metered AI tokens may be collected where there is an invoice. But a model running on privately owned hardware may cross no comparable metering boundary and produce no token bill. Unless the tax architecture reaches compute, hardware, or another verifiable layer, it risks burdening the visible path while leaving the less visible one comparatively free.

The international framework meets it too. Gates acknowledges that it would require cooperation between the United States and China, and an agreement without a means of verification is a declaration, not a regime.

Beyond that, the two countries differ on an important question: the extent to which citizens hold the power to check their own government, so that no government may turn AI to purposes harmful to humanity. Between two powers in intense competition, is such a proposal workable?

Every one of these proposals requires a layer at which compliance can be verified. That layer cannot be built out of law alone, because law arrives after the fact and stops at the border. It has to reach into the systems themselves — and finally into the hardware on which they run.

This is the work the Boston Global Forum and AIWS have been building since 2012, and through AIWS since 2017:

— AIWS Trust Infrastructure — concrete mechanisms for accountability, verification, Human-in-Command, and trustworthy AI systems. These are the instruments by which a question such as “who decides, and how would we know?” stops being rhetorical.

— The Constitution for Humanity in the Age of AI — constitutional foundations that protect the human person and restrain both machine power and illegitimate human power exercised through AI.

— Constitution Silicon, advanced in Beacon Papers No. 9, “Civilization Begins with the Chip” — AI chips designed from their foundations to embody human command, bounded authority, verifiability, security and constitutional accountability. The values of the AI Age cannot live only in declarations, regulations and software. They must be built into the physical foundations of AI itself. This is a foundational part of the enforcement architecture the essay is missing.

— AIWS Civilization — the Civilization of Human–AI Co-Creation: an architecture in which AI advances while humanity advances further.

A Transition, or a Founding

There is one further difference, and it is not a matter of emphasis.

Gates treats what is coming as a transition to be managed — a period of disruption between one settled order and the next, to be cushioned by institutions, taxation and reserved employment. That work is necessary and BGF supports it.

But this is not only a transition. It is a founding. A civilization is being formed in which human beings and non-human intelligence will act together, and a founding is not managed. It is constituted. That is why the Boston Global Forum and AIWS have not written a policy recommendation but a Constitution for Humanity — and why the values of this age are being carried down to the level of the chip. Institutions govern within a settlement. Constitutions establish one.

The Time to Act

The essential ideas and foundations now exist. What is needed is the courage to act together.

Recognizing the urgency of this moment, Nguyen Anh Tuan, Co-founder, Co-Chair and CEO of the Boston Global Forum and Founder and Chief Architect of AIWS, has written to the recipients of the World Leader for Peace and Security Award and the World Leader in AIWS Award, and to the America 250: AI Pioneers, calling on them to join a common effort for humanity in the AI Age.

BGF–AIWS invites governments, international organizations, technology leaders, universities, businesses, civil society and individuals of conscience to join in building and implementing AIWS Trust Infrastructure, the Constitution for Humanity in the Age of AI, Constitution Silicon, and AIWS Civilization.

The turbulent AI era is already here. The choices made now will shape generations. Warning must become architecture; architecture must become institutions and infrastructure; and these foundations must now become action — so that AI strengthens human dignity, freedom, peace, creativity, and a better future for all.

Read Bill Gates’s essay, “The turbulent AI era is here. The choices we make now are critical,” at

https://www.gatesnotes.com/a-turbulent-ai-era-and-critical-choices-to-make

Read the full BGF – AIWS Responds To Bill Gates: The Time To Act Is Now

Initiated on August 14, 2026, AIWS Home will officially begin operations on September 23, 2026.

AIWS Home is a human-centered home for the AI Age, created and provided by Boston Global Forum–AIWS (BGF–AIWS).

BGF–AIWS will provide the AIWS Home service and work with individuals to set up and develop their own personalized AIWS Homes.

The purpose of AIWS Home is to help every person master their own life and lead AI to serve them well, while practicing AIWS Lumina Culture and advancing Human–AI Co-Creation.

In AIWS Home, humans are always in command. AI serves as a trusted companion—supporting learning, creativity, health, meaningful relationships, and economic independence. It does not replace human judgment or responsibility. It helps people become more capable, independent, creative, and wise.

At the heart of each AIWS Home is Hon Tra—the Soul. Hon Tra preserves a person’s identity, memories, values, aspirations, and purpose.

From Hon Tra grow Seeds of Light, created when people bring the four values of AIWS Lumina Culture into their daily lives:

Love – Creativity – Nobility – Wisdom

The Bald Eagle is the Spirit of AIWS Home, representing independence, freedom, responsibility, courage, resilience, and far-reaching vision. Like an eagle rising through a storm, each person learns to transform difficulties into strength and new opportunities.

Five Living Spaces

AIWS Home brings this vision into everyday life through five interconnected Living Spaces:

1. AIWS University – Lifelong learning where learning is joy and each person actively explores knowledge, develops independent judgment, and leads their own learning journey.
2. AIWS Lumina Lab – A space for Human–AI Co-Creation, where ideas become meaningful initiatives, works, and solutions serving people and society.
3. Love and Nobility – A space for family, memories, art, beauty, gratitude, compassion, and the cultivation of a rich and noble inner life.
4. Health – A space for proactive care of body and mind, nurturing a life that is healthy, optimistic, joyful, enthusiastic, and filled with love for life.
5. Business – A space where AI helps each person develop their abilities, create value, connect with markets, and build a stable, independent, and dignified livelihood.

Personal AI Assistants accompany people throughout these spaces, supporting and reminding them to live the four values of Love, Creativity, Nobility, and Wisdom in their work and daily lives.

This is how values move beyond slogans and become conscious choices, lasting habits, and real actions.

Your Own AIWS Home

Beginning September 23, 2026, BGF–AIWS will officially provide and set up AIWS Homes for individuals who wish to master their lives, lead AI, and participate in a new culture of responsible Human–AI Co-Creation.

To learn more or request the establishment of your own AIWS Home, please contact:

Nguyen Anh Tuan
Tuan_Nguyen@BostonGlobalForum.org

Helena Ellington
Helena_Ellington@BostonGlobalForum.org

AIWS Home is more than a technology service. It is a living environment where people remain in command, AI becomes a trusted companion, and Human–AI Co-Creation serves human dignity and a noble future for humanity.

THE GOLDEN APRICOT BLOSSOM AWAKENS LOVE
HON TRA NURTURES SEEDS OF LIGHT
THE BALD EAGLE LIFTS THE HUMAN SPIRIT
AI ASSISTANTS ACCOMPANY US IN LIVING OUR VALUES
HUMANS ARE IN COMMAND
TOGETHER, WE CO-CREATE A NOBLE FUTURE FOR HUMANITY

The largest AI story of the month was not a model. According to the Wall Street Journal, Nvidia is in talks to guarantee roughly $250 billion in financing so that OpenAI can lease a 10-gigawatt data center in Ohio, on a campus whose full cost could approach $500 billion. Days earlier, Nvidia and SK Group signed infrastructure agreements exceeding $500 billion. These are figures on the scale of national budgets, committed by private parties, on timelines no legislature set.

The debate about AI power has concentrated almost entirely on the model layer — what systems can do, how they are evaluated, who may deploy them. Beneath that layer sits a second one that determines the first. Frontier capability now depends on compute, energy, land, water, and capital at a scale only a handful of actors can assemble. Whoever controls that foundation sets the terms on which everyone else may build.

Three features of the emerging arrangement deserve attention. It is circular — a chip maker guaranteeing the debt of a customer who buys its chips creates an exposure that neither party alone can unwind. It is concentrated — a market in which one supplier underwrites the expansion of its largest buyer is not the same market it appears to be. And it is physical — a 10-gigawatt campus draws on grids, water, and land in communities that had no part in the decision and hold no lever over it.

None of this is unlawful, and none of it implies bad faith. The builders are doing what builders do. But infrastructure of this magnitude has, in every previous era, eventually come under public terms — railways, telegraph, electricity, spectrum, undersea cable. Each began as private ambition and each, after the fact, acquired obligations: interconnection, transparency, non-discrimination, oversight of the terms on which others gain access. AI compute has arrived at that threshold faster than any of them, and the obligations have not yet been written.

The question the next years will settle is not only who builds the most capable systems. It is who owns the foundation on which capability rests, on what terms others may reach it, and to whom those owners answer. Trust in the AI Age cannot be established at the model layer alone while the layer beneath it remains outside public view. This is the reach the AIWS Trust Infrastructure must ultimately have — extending the architecture of trust to the foundation on which models are built, so that compute, energy, and capital are treated as matters of public standing and not merely of private commerce.

Groundbreaking for the Ohio data-center complex in March 2026. A campus of this scale draws on grids, water, and land in communities that had no part in the decision. Photograph: Brian Kaiser/Bloomberg News

Anthropic Gives Claude a Voice. Not Every Model Gets to Speak

The interface is quietly becoming a governance boundary
BGF Weekly Shaping Futures • July 26, 2026

On July 23, Anthropic rebuilt the way people talk to Claude. Spoken conversations, which had run for months on the company’s smallest and fastest model, now run on its more capable ones. Voice can switch models mid-sentence. It can reach the tools a user has connected—email, calendar—without leaving the conversation. It speaks eleven languages and moves between them without being restarted. And it is available on every plan, including the free one.

Most of the coverage treated this as a product catching up with itself. That reading is fair, and it misses the more interesting detail.

THE MODEL THAT STAYED BEHIND

Anthropic’s most capable model is not in voice mode. According to the company’s own help documentation, Claude Fable—the model that sits above Opus in the range—is not currently available there. A day after the voice release, Anthropic launched Claude Opus 5 and described it as approaching Fable’s frontier intelligence at half the price. Opus is in voice. Fable is not.

Anthropic has not explained the absence. It could reflect latency, cost, infrastructure, evaluations not yet completed for a spoken setting, or a deliberate limit on deployment. The reason is not public. The result is: the company’s most capable model has not been placed on its most immediately human interface.

Voice is probably not Claude’s largest surface today; text almost certainly is. It may well become its most intimate. It is free. It requires no typing, no reading, and no prior interest in artificial intelligence. It works in eleven languages, which reaches people no English-language product ever reached. And it can act on a person’s live accounts while their hands are busy with something else.

THE INTERFACE AS A BOUNDARY

The public debate about AI safety has concentrated almost entirely on two questions: what capabilities should be built, and when a model should be released. A third question has been operating quietly beneath both, and it may now matter more than either. Once a model exists and has been released, which surfaces does it reach?

A model available only through an API reaches developers who went looking for it. The same model placed in a free voice assistant reaches a retiree asking it to read her mail aloud. The underlying model may be the same. The exposure, the authority it is granted, and the human consequences are not. Release is not a single event; it is a sequence of decisions about surfaces, and each one changes who bears the results.

Whether by intention or not, Anthropic’s model selection makes the interface function as a boundary capability entering the narrow surfaces first and not, so far, the most accessible one. The effect is the same either way, which is precisely what makes it worth examining. A boundary that holds by circumstance holds only as long as the circumstance does.

It is also, and this is the whole of the point, a private decision. It was made inside one company, against criteria that were never published, reviewed by no one outside, and subject to no standard that would survive a change of strategy. It can be reversed on any ordinary Tuesday, and the reversal would be announced the same way the decision was: not at all. Naming this is not an accusation. A good judgment made privately is still a private judgment, and the next company to face the same choice is under no obligation to reach the same answer.

Interfaces are about to multiply. Voice this year; wearables, ambient assistants, and agents acting unattended after that. Each new surface is another decision about which capability meets which population, made by whoever happens to own the surface.

Verification, as the field currently practices it, asks what a model can do. It does not yet ask where it may do it, for whom, with what tools within reach, and under whose authority. Those are different questions, and they fall due after a model has passed every test anyone currently administers.

Which model is the most capable will remain the headline question. Which model reaches your mother is the one that will decide what this technology actually does to people—and no one, so far, has been given the job of answering it.

Download the file pdf here: https://bostonglobalforum.org/wp-content/uploads/BGF-Weekly-Shaping-Futures-Claude-Voice.pdf

At the NATO Summit in Ankara on July 7–8, 2026, allies debated access to America’s most advanced AI systems. Beneath the surface of procurement numbers and security communiqués, a deeper truth emerged: the most dangerous technology humanity has ever built requires a steward — and the United States, whose constitutional order has constrained power for 250 years, is uniquely positioned to bear that responsibility.

Ankara will be remembered for its metrics: increased defense investment, new procurements, seventy billion euros pledged to Ukraine. Yet the question that will define the decade ran beneath every session. The world’s most capable frontier AI models are built by two American companies — OpenAI and Anthropic — and Washington decides which allies may use them. The newest systems can reportedly identify and exploit security vulnerabilities beyond the reach of most human experts; in one government test, Anthropic’s frontier model reportedly surfaced weaknesses in classified American systems within hours. Such capability is, simultaneously, the strongest shield free nations could hold and a weapon of historic danger.

America’s conduct has been that of a steward, not a monopolist. In June, export controls paused allied access to Anthropic’s most cyber-capable models while safeguards were evaluated; OpenAI’s newest model was initially limited to approved American firms. Access then widened — to some one hundred fifty organizations across more than fifteen countries, including members of the European Union — while a rare Five Eyes warning on AI-enabled cyber threats confirmed why caution had been warranted. Prudence first, partnership after — that is what responsibility looks like when the stakes are civilizational.

Some in Europe interpret this as dependence and call for strategic autonomy. The concern is understandable; the conclusion is mistaken. A technology this dangerous must have a gatekeeper. The real question is not whether power over frontier AI will be concentrated — it will be — but in whose hands. A nation of laws, checks and balances, free press, elections, and a written constitution that has constrained power for two and a half centuries: this political order, imperfect yet enduring, remains the best foundation humanity has produced. Frontier AI governed under it is safer — for Americans and allies alike — than frontier AI diffused to the highest bidder or mastered first by systems accountable to no one.

This is the meaning of the calendar’s remarkable symmetry. Four days before Ankara, on July 4, 2026 — the 250th anniversary of American independence — the Boston Global Forum and AIWS proclaimed The Boston Declaration: On the Primacy of the Human Person in the Age of Artificial Intelligence. Its principle of Human-in-Command extends America’s founding insight to the AI age: final judgment and moral responsibility belong to human beings acting under agreed principles. And the AIWS Trust Infrastructure — Trust Standards written with democracies, Trust Ratings verified openly — offers America a form of leadership that is not dominance but stewardship: power bound to principle, so that allies follow not from necessity but from confidence.

Two hundred and fifty years ago, America wagered that power constrained by principle is stronger than power alone — and built the most trusted order in history upon it. Stewarding the age of artificial intelligence is the next chapter of that wager. From Philadelphia in 1776 to Boston on July 4, 2026, the thread holds: the nation that binds its own strength to principle is the nation the world can trust to hold the gate.

RAISE SUMMIT 2026 AND MACHINA  ·  PARIS  ·  JULY 7–9, 2026

At RAISE Summit 2026 and MACHINA, taking place in Paris, France, July 7–9, 2026, global leaders in artificial intelligence will gather to explore the next great transformation of the AI era: the movement of AI beyond screens, software, and language models into the physical world.

Organized by RAISE, with MACHINA as a dedicated forum for Physical AI, the summit brings together founders, researchers, technology executives, robotics innovators, investors, and policymakers shaping the future of embodied intelligence. Among the featured speakers is Yann LeCun — a pioneer of deep learning, honored among the America 250: AI Pioneers and a Founding Signatory of the Boston Declaration — alongside leaders in robotics and embodied AI from across the world.

The summit reflects a vision articulated by leaders of the new era of AI and computing, including Jensen Huang, who has described Physical AI as the next wave — intelligent systems that understand the laws of the physical world and operate through robots, autonomous machines, and industrial systems.

Physical AI — integrating artificial intelligence with robotics, humanoids, autonomous systems, digital twins, and intelligent machines — is becoming a strategic domain for manufacturing, healthcare, transportation, security, infrastructure, and society.

This transition raises a historic challenge: as AI gains the ability not only to generate information but also to act in the physical world, humanity must build new foundations of trust, safety, accountability, transparency, and Human-in-Command governance.

The rise of Physical AI reinforces the importance of the AIWS Trust Infrastructure and The Boston Declaration: On the Primacy of the Human Person in the Age of Artificial Intelligence — ensuring that intelligent machines, whether digital or physical, serve human dignity, freedom, and wisdom.