Signal

OpenAI says Control Room can stop research model output within 35 seconds

OpenAI says its Control Room tracks research model workloads and blocks further output after a stop signal. The company says it can halt output within 35 seconds and is designed to fail closed if the service goes down.

2 min read
Control Room in black text surrounded by routed lines and pastel diamonds on a light dotted background.
OpenAI Control Room announcement cover · Credit: OpenAI View source

OpenAI has detailed Control Room, a central system it says tracks model workloads across its research infrastructure and can stop them when safety or security concerns arise. The company says it connects every research inference workload, including agentic sampling for training and evaluation, data processing, and other jobs.

The system assigns each research job an identifier. Before an inference engine fulfills a request, it checks with Control Room to confirm that the job remains authorized. If a person or monitoring system has stopped the job, Control Room denies the next authorization and the engine refuses to return more model output. The research process itself may remain running, but it cannot continue sampling through that controlled engine.

OpenAI says the maximum time from a stop instruction to preventing further progress is 35 seconds. The company attributes that delay to a caching layer used to handle request volume and says it is working to reduce the interval to zero.

The design also fails closed: if Control Room is unavailable or disabled, the inference integration denies requests until service returns. At the time of the announcement, OpenAI said this configuration covered all frontier-model research workloads, with rollout to other research workloads planned over the following days.

The announcement describes internal research infrastructure. OpenAI says its external model-serving stack is more centralized by nature and already has separate operational capabilities to take down deployments quickly. The post does not say Control Room itself governs public API or ChatGPT inference.

The system places the authorization check in the inference path instead of relying on each research job's code to stop itself. That design may make policy more consistent across varied workloads, while concentrating the decision at a shared service. The 35-second bound, deployment coverage, and reliability claims are OpenAI's own account rather than an independent operational audit.

Sources

More Safety & Security reporting