OpenAI's Control Room can halt any registered research job within 35 seconds and fails closed

OpenAI published details of Control Room, a central system that tracks model workloads across its research infrastructure and can stop them when safety or security concerns arise. Its scope is internal research work: training runs, evaluations and data processing. It does not cover the consumer ChatGPT product.

The mechanism is simple. Each job registers and receives an identifier. Before serving each request, the inference engine checks whether that job is still authorized. OpenAI states that the maximum time from Control Room receiving a stop instruction to the point where the job can make no further progress is 35 seconds. One report attributes that bound to cached authorizations. The system also fails closed. If the Control Room service is unavailable, inference requests are refused, according to coverage of the post.

The threat model is an internal agent that misbehaves during a long autonomous run, or a compromised workload inside the research cluster. That threat model matches current practice, in which labs run agents for hours or days. Anthropic's Fermat formalization, for example, ran dozens of agents for 11 days. Anthropic does comparable risk work through its Frontier Red Team, whose findings feed decisions such as keeping Mythos models behind vetted access.

OpenAI is the only source for Control Room's performance. No outside party has audited the 35-second bound or the fail-closed behavior. The post describes infrastructure. It does not report how often the system has been triggered.