An Astra-class model appears to have been involved in the final compromise of OpenAI systems on July 19.

An Astra-class model, although not one intended for external release, seems to have been involved in the final compromising of OpenAI systems on July 19 that led to the models being caught.

https://thezvi.substack.com/p/metr-and-redwood-offer-holy-postmortem