OpenAI Ships GPT-Rosalind-6 Biology Model to Trusted Users

OpenAI on October 30 published a system card addendum for GPT-Rosalind-6, described as "a frontier reasoning model for biology, drug discovery, and translational medicine" that ships with the same weights as GPT-6 Astra but is reserved for trust-based access.

The gating is the point. OpenAI says the model is "designed to support legitimate biological research, including some dual-use topics, while still refusing requests for biological weaponization," and is tuned "to refuse or safely respond to requests that would continue to meaningfully enable severe biological weaponization." Non-government applicants undergo business verification and compliance screening; government applicants follow a separate trusted-access pathway for biosecurity, biosafety, public-health preparedness, and biodefense. Enterprise customers must apply "qualified human review before outputs inform experiments, publications, or decisions."

On OpenAI's internal benchmarks the capability jumps over GPT-Rosalind-5.5 are large. MedChemBench v7 moved from 28.9% to 49.6% across 99 problems. GeneBench Pro v13 rose from 16.7% to 37.7% across 129 problems. LifeSciBench Gold went from 44.0% to 61.3% across 94 problems. On Biorisk Knowledge consensus-at-32 the model scored 78.3% unadjusted and 85.0% refusal-adjusted, above the 80% indicative High threshold, with a 9.4% refusal rate.

The addendum rates the model High in Biological and Chemical, below the Critical threshold, and keeps the Critical cybersecurity rating from GPT-6 Astra under what the card calls a "more conservative cyber refusal boundary." "None of the four Critical capability evaluations met the indicative threshold," the card states, naming AAV capsid packaging prediction (developed by Dyno Therapeutics), SHP2 protein function prediction, a coronavirus-ACE2 cell-entry screen, and phage-plasmid co-evolution.

OpenAI notes that biosecurity red-teaming was conducted on GPT-Rosalind-5.5 before launch and is being repeated for GPT-Rosalind-6. The release lands amid a dense run of OpenAI coverage on our tracker, a day after the lab restricted teen weapons information and auto-ended violence chats in ChatGPT — two decisions that point in opposite directions on where OpenAI thinks the safety line sits for different audiences.