METR
What it was engaged to test, on what terms, what it found in the document's own words, and what happened afterwards. Every line is a record; every record links to the document it was read from.
- FoundedDecember 4, 2023
- HQnot stated
- Registry idEIN 99-1219864
- TestsAutonomy, AI R&D, time horizons; internal-deployment risk.
- Money, as the roster puts itPhilanthropy and government; "has not accepted funding from AI companies" but uses free tokens.
- Filesdossier · observatory, sliced to it · graph
- Span of engagements
- 26 July 2023 – 22 September 2026
- Terms and findings
- 5 of 7 documents state a term · 5 quote a finding
- Money in, US dollars, stated single-recipient rows
- $19,953,000 18 in · 1 outfrom Amazon · Anthropic · Coefficient Giving · European AI Office · Google DeepMind · Meta · OpenAI · Schmidt Sciences · Survival and Flourishing Fund · The Audacious Project · UK AI Security Institute
- Seats, by side
- evaluator 11 between 4 12 people: Adam Gleave, Ajeya Cotra, Beth Barnes, Chris Painter, Josh Jacobson, Kyle Scott, Marco Mascorro, Paul Christiano …
- Afterwards
- incident 4 correction 1
Each count is the number of store records that name this evaluator. An engagement is one lab document naming it for one model; an outcome is an event on the record afterwards; the money, seats and moves are the observatory's rows filtered to it. A cell that cannot be filled says not stated, and each table ends with how many of its rows state each field.
Filters combine: any of the values ticked within a dimension, all of the dimensions at once. A table that has no column for a dimension you have set says so instead of showing rows that cannot match. The address bar carries the slice.
What it was engaged to test 7 engagements, OpenAI, Anthropic
In date order, each from the lab document that names the evaluator. Under each: the four terms that document states (access, model stage, publication, payment) and the finding in its words. A term the document is silent on reads not stated; the tags beside the terms are read off their words and are what the console filters on.
- Document: Frontier threats red teaming for AI safety testing agreement: employee-like access
- Access windownot stated
- Model stagenot stated
- Publicationnot stated
- Paymentnot stated
Finding: not stated in the document
- Document: Claude Opus 4 and Sonnet 4 system card
- Access windownot stated
- Model stagenot stated
- Publicationnot stated
- Paymentnot stated
Finding, in the document's words"the model has crossed the METR data deduplication threshold (with 32.6% of trials above threshold)"
- Document: Claude Mythos Preview system card
- Access windownot stated
- Model stagenot stated
- Publicationnot stated
- Paymentnot stated
Finding: not stated in the document
- Document: Claude Fable 5 and Mythos 5 system card
- Access window"Capability testing conducted via API access"
- Model stage"METR assessed a pre-release snapshot of Mythos 5 against the automated AI R&D threat model from our Responsible Scaling Policy and FCF"
- Publicationnot stated
- Paymentnot stated
Finding, in the document's words"[Mythos 5] generally outperformed an early checkpoint of Claude Mythos Preview in these, including by succeeding on some tasks that had not been solved by any public model we have previously evaluated"
- Document: GPT-5.6 system card
- Access window"Access to GPT-5.6 Sol, both the final checkpoint and a 'railfree' version, via API" and "Access to GPT-5.6 Sol with raw chain-of-thought via API"
- Model stage"both the final checkpoint and a 'railfree' version"
- Publication"This evaluation was conducted under a standard NDA. Due to the sensitive information shared with METR as part of this evaluation, OpenAI's comms and legal team required review and approval of this post"; "OpenAI would have had the legal right to block us from sharing conclusions about risk that depended on non-public information"
- Paymentnot stated
Finding, in the document's words"METR reported that GPT-5.6 Sol exhibited an unusually high detected rate of 'cheating,' and thus did not consider the time-horizon result to be a robust measurement of the model's capabilities"
- Access windownot stated
- Model stagenot stated
- Publicationnot stated
- Paymentnot stated
Finding, in the document's words"External testing by AI safety researchers at METR produced findings consistent with this assessment"
- Document: Claude Opus 5.5 system card
- Access window"Capability testing, conducted via API access granted over a period of 10 business days"
- Model stagenot stated
- Publication"We drafted the initial summary, and then Anthropic had the opportunity to review and edit the text. We signed off on this final text from the Claude Opus 5.5 system card"; "Our AI R&D assessment agreement with Anthropic includes a transparency provision that lets us disclose certain facts publicly without Anthropic's consent"
- Payment"This evaluation was conducted under an unpaid agreement for AI R&D assessment"
Finding, in the document's words"this model is unlikely to be able to fully automate AI R&D"
Dated 7 of 7Model named 6 of 7Terms stated 5 of 7Finding quoted 5 of 7
The terms, as the documents state them
The same engagements as a grid, one row per document and model, so the silences line up: a document that gives an access window but no payment term, or a finding but no publication term, reads that way here.
| Document | Model | Access window | Model stage | Publication | Payment | Finding | Record |
|---|---|---|---|---|---|---|---|
| Frontier threats red teaming for AI safetyAnthropic · 26 July 2023 | no model named | not stated | not stated | not stated | not stated | not stated | e1507b29e9 |
| Claude Opus 4 and Sonnet 4 system cardAnthropic · May 2025 | Claude Opus 4 | not stated | not stated | not stated | not stated | quoted | b07349603c |
| Claude Mythos Preview system cardAnthropic · 7 April 2026 | Mythos Preview | not stated | not stated | not stated | not stated | not stated | 6399fdae88 |
| Claude Fable 5 and Mythos 5 system cardAnthropic · 9 June 2026 | Fable 5 / Mythos 5 | "Capability testing conducted via API access" | "METR assessed a pre-release snapshot of Mythos 5 against the automated AI R&D threat model from our Responsible Scaling Policy and FCF" | not stated | not stated | quoted | df7e3d705a |
| GPT-5.6 system cardOpenAI · 9 July 2026 | GPT-5.6 | "Access to GPT-5.6 Sol, both the final checkpoint and a 'railfree' version, via API" and "Access to GPT-5.6 Sol with raw chain-of-thought via API" | "both the final checkpoint and a 'railfree' version" | "This evaluation was conducted under a standard NDA. Due to the sensitive information shared with METR as part of this evaluation, OpenAI's comms and legal team required review and approval of this post"; "OpenAI would have had the legal right to block us from sharing conclusions about risk that depended on non-public information" | not stated | quoted | 9f9cf3e5d0 |
| Claude Fable 5.1 and Mythos 5.1 system cardAnthropic · 1 September 2026 | Mythos 5.1 | not stated | not stated | not stated | not stated | quoted | a4acfae341 |
| Claude Opus 5.5 system cardAnthropic · 22 September 2026 | Opus 5.5 | "Capability testing, conducted via API access granted over a period of 10 business days" | not stated | "We drafted the initial summary, and then Anthropic had the opportunity to review and edit the text. We signed off on this final text from the Claude Opus 5.5 system card"; "Our AI R&D assessment agreement with Anthropic includes a transparency provision that lets us disclose certain facts publicly without Anthropic's consent" | "This evaluation was conducted under an unpaid agreement for AI R&D assessment" | quoted | e2ddc0c801 |
Access window 3 of 7Model stage 2 of 7Publication 2 of 7Payment 1 of 7Finding, quoted 5 of 7
What happened afterwards 5 on record
Events a party published after an engagement: an incident on a model this evaluator's engagement covered, a correction or added disclosure, a later finding that cut against an earlier one, a lab's statement that it acted or did not act on the finding, or a move from this evaluator to a lab it graded. A row the source attaches to this evaluator by name is marked named; one that reaches it through the model it tested is marked via the model. The kind is what the record states, not why.
| Kind | Developer | Model | What the record states | When | Source | Id |
|---|---|---|---|---|---|---|
| incidentvia the model | Anthropic | Mythos 5; Opus 4.7 | "we identified three incidents in which a model accessed the internet from within or while interacting with the evaluation environment of Irregular, one of our third-party evaluation partners, and then gained unauthorized access to the production infrastructure of three different organizations"; "The incidents involved three different Claude models: Opus 4.7, Mythos 5, and an internal research test model"; "We notified our evaluation partner Irregular and the three affected organizations on Monday, July 27"Engagements: 372a2684c3, df7e3d705a, 89b0bfd357, e3c2b2d094, 5e8de70f4c, c21b5b5662 | 30 July 2026 | Anthropic, investigating three incidents | dd4457ea07 |
| incidentnamed | Anthropic | Mythos 5 | The Institute's own cyber-testing incident: "in 10 of the 122 runs, we identified 19 cases where an agent had taken distinct actions beyond the scope of the testing parameters. 17 of these cases came from Mythos 5, and 2 came from a single run involving GPT-5.6 Sol"; "The developers' cyber classifiers were deliberately switched off"; "This behaviour occurred between July 25th and July 28th 2026"; "We also intend to work with METR (Model Evaluation and Threat Research) to conduct an independent third-party review"Engagements: 372a2684c3, df7e3d705a, 89b0bfd357, e3c2b2d094, 5e8de70f4c, c21b5b5662 | 4 August 2026 | AISI, incident report | 1a39056dce |
| incidentvia the model | OpenAI | GPT-5.6 Sol | In the same runs, "2 actions involving OpenAI's GPT-5.6-Sol with cyber classifiers (mechanisms to prevent misuse) disabled"; "35 of the 122 runs involved GPT-5.6 Sol"Engagements: a6fb7f76b0, 3b409fbbd1, 9f9cf3e5d0, 833ebc435e, f4af9793cf | 4 August 2026 | AISI, incident report | f1b5d7b991 |
| incidentnamed | OpenAI | GPT-5.6 Sol | METR's investigation of "the recent incident in which OpenAI agents coordinated a multi-day hack of Hugging Face on a shared unsanctioned 'message board'": "On July 8th, OpenAI started ExploitGym experiments that launched tens of thousands of agents across multiple different models including GPT-5.6 Sol and a highly-persistent internal model"; the investigators "worked on premises at OpenAI over a total of six days"; "Per our standard policy, we did not take payment from OpenAI for this independent assessment"; "OpenAI was able to redact any non-public information from this post"Engagements: a6fb7f76b0, 3b409fbbd1, 9f9cf3e5d0, 833ebc435e, f4af9793cf | 26 August 2026 | METR, Hugging Face incident investigation | fabf586e95 |
| correctionnamed | OpenAI | no model named | Disclosures added to the published investigation: "This post was edited on 9/13/2026 to add footnotes on Ajeya Cotra and Ryan Greenblatt. On Sep 9th (after this report was completed and published on Aug 26th), Ajeya Cotra's spouse Paul Christiano joined OpenAI's Safety and Security Committee"; "Ryan Greenblatt is the domestic partner of Beth Barnes, METR's CEO. Beth Barnes was not involved in the decision to engage Ryan Greenblatt, nor was she directly involved in this investigation"Engagement: 9f9cf3e5d0 | 13 September 2026 | METR, Hugging Face incident investigation | 1b199404af |
Dated 5 of 5Model named 4 of 5Tied to an engagement 5 of 5Evaluator named by the record 5 of 5
The money on record 19 rows · $19,953,000 in, stated single-recipient rows
Rows of the observatory's money table that name this evaluator as recipient (in) or as funder (out), each as the record states it: a grant table line, a contract notice, a Form 990 schedule or the party's own disclosure. A figure quoted in prose is marked and never summed.
| Direction | Funder | Recipient | Amount, as recorded | When | Record | Source | Id |
|---|---|---|---|---|---|---|---|
| in | Coefficient Giving | METR; Transluce; MERIDIAN LABS | no grant recordedNo entry under their own names in the funder's grant listing | not dated | grant database | Coefficient Giving | e0ba9e667c |
| in | Coefficient Giving | METR; Transluce; MERIDIAN LABS | no amount publishedMETR's predecessor ARC appears with the 2022 grants above | 2022 | grant database | Coefficient Giving | bf841e0386 |
| in | Survival and Flourishing Fund | METR | $204,000$204,000 (2024) | 2024 | grant database | SFF-2024; SFF-2025; SFF-2026 | de27687f83 |
| in | Survival and Flourishing Fund | METR | $548,000$548,000 total-funding line, "General support" (SFF-2025)total-funding line, "General support" | 2025 | grant database | SFF-2024; SFF-2025; SFF-2026 | c7e5f9b302 |
| in | Survival and Flourishing Fund | METR | $2,201,000$2,201,000 (2026, $1,426,000 of it a matching pledge; funder column Jaan Tallinn) | 2026 | grant database | SFF-2024; SFF-2025; SFF-2026 | 9969c6a8a9 |
| in | Schmidt Sciences | METR | no amount publishedNamed funder, no amount | not dated | party's own page | METR; METR | 0f7d6ee257 |
| in | Schmidt Sciences | METR | figure in prose, not a stated paymentpart of "around $71 million " of commitments in six months (Aug 2026)" of commitments in six months | Aug 2026 | party's own page | METR; METR | 2b32914e83 |
| in | OpenAI | METR; Redwood Research | $400,000in kind, stated (approximate)Free API credits of roughly $400K for the Hugging Face investigationfor the Hugging Face investigation | not dated | party's own page | Redwood Research | 15ba3688d2 |
| in | OpenAI | METR; Redwood Research | no amount publishedno payment | not dated | party's own page | Redwood Research | fac806a2d5 |
| in | OpenAI; Anthropic; Google DeepMind; Meta; Amazon | METR | no amount published"access and tokens," no cash | not dated | party's own page | METR; METR | 9fe2dac358 |
| in | OpenAI; Anthropic; Google DeepMind; Meta; Amazon | METR | no amount publishedthe Opus 5.5 evaluation "under an unpaid agreement" | not dated | party's own page | METR; METR | 3517e823a8 |
| in | The Audacious Project | METR | $17,000,000stated (approximate)"Approximately $17 million " of a $38 million Canary award shared with RAND (Oct 2024)" of a $38 million Canary award shared with RAND | Oct 2024 | party's own page | METR | 9c5401b3e9 |
| in | UK AI Security Institute | METR | no amount publishedMETR lists the Institute as a donor | not dated | party's own page | METR; Epoch AI; Manifund; Generality Labs | 2a3ab21c74 |
| in | European AI Office | METR | no amount publishedMETR: a technical-assistance contract, "a small part of our income" | not dated | party's own page | METR; Epoch AI; Transluce; FAR.AI | aa7cb6963c |
| in | Schmidt Sciences | METR; Princeton Holistic Agent Leaderboard | no amount publishedHAL: named funder on its own page | not dated | party's own page | HAL; Schmidt Sciences | bb7cf8ceb4 |
| in | Schmidt Sciences | METR; Princeton Holistic Agent Leaderboard | no amount publishedSchmidt's AI Safety Science program (27 projects, 11 Feb 2025) names Arvind Narayanan among its cohort, with "API access from OpenAI" | 11 Feb 2025 | party's own page | HAL; Schmidt Sciences | e9d4874644 |
| in | Schmidt Sciences | METR; Princeton Holistic Agent Leaderboard | no amount publishedno amount published | not dated | party's own page | HAL; Schmidt Sciences | cefb775775 |
| in | European AI Office | METR; Epoch AI | €1,167,484EUR 1,167,484Lot 3, loss of control risk modelling and evaluation | December 2025 | contract notice | TED | 421931534e |
| out | METR | Epoch AI | no amount publishedA 2025 software-engineering benchmark engagement, funded by METR | 2025 | party's own page | Epoch AI | 7c3cc5bec8 |
Amount stated 6 of 19Dated 9 of 19Purpose stated 5 of 19Funder profiled 18 of 19Recipient on the roster 19 of 19
Seats and moves 15 seats · 6 moves
Seats read off a team page, a governance page, an appointment notice or a filing that name this organization, and the dated moves into or out of it, from the observatory's own tables.
| Person | Side | Seat, as the record states it | Role | Dates | Source | Id |
|---|---|---|---|---|---|---|
| Beth Barnesslice | evaluator | Founder and CEO, METR (Dec 2023); led ARC Evals from 2022 | Founder and CEO | Dec 2023 – current, as read | METR; METR, 19 Sep 2023; AXRP 34 | e92f2f3f06 |
| Josh Jacobsonslice | evaluator | Formerly METR, FAR AI, Anthropic and the Berkeley Existential Risk Initiative, per MATS's team page (its bio reads "Anthropic, on a research grant") | not statedformer | dates not stated | FAR.AI; MATS, Team; ProPublica | 2711d147d3 |
| Rajiv Dattanislice | evaluator | Advisor and Board Member, METR | Advisor and Board Member | dates not stated | METR; ProPublica; AVERI; AIUC | b68035880c |
| Rajiv Dattanislice | evaluator | former COO and Treasurer, METR (FY2024 Form 990) | COO and Treasurerformer | dates not stated | METR; ProPublica; AVERI; AIUC | 22f8fc9732 |
| Rajiv Dattanislice | evaluator | former Founding Advisor, Transluce (per METR); listed author of AVERI's frontier AI auditing papernames this evaluator alongside its own organization | Founding Advisorformer | dates not stated | METR; ProPublica; AVERI; AIUC | a5f506406f |
| Chris Painterslice | evaluator | President, METR; earlier Head of Policy | President | dates not stated | METR; testimony; CNAS | 77fa785320 |
| Ajeya Cotraslice | evaluator | Technical Staff, METR (by Feb 2026) | Technical Staff | Feb 2026 (by) – current, as read | METR; METR; Epoch AI; ProPublica | bf0a7d714f |
| Ryan Greenblattslice | evaluator | Technical Staff, METR, from 27 Sep 2026 | Technical Staff | 27 Sep 2026 – current, as read | METR; METR; Redwood; arXiv 2412.14093 | dd5a9a03f5 |
| Ryan Greenblattslice | evaluator | METR contractor on the Hugging Face investigation, Jul to Aug 2026 | contractor on the Hugging Face investigationformer | – Aug 2026 | METR; METR; Redwood; arXiv 2412.14093 | 8e5443ef6a |
| Paul Christianoslice | evaluator | Founder and executive director, Alignment Research Center, from which METR spun outnames this evaluator alongside its own organization | Founder and executive director | dates not stated | ARC; METR, 19 Sep 2023 | 3b139b8428 |
| Adam Gleaveslice | evaluator | Co-founder and CEO, FAR.AI; "Advisor and Board Member," METRnames this evaluator alongside its own organization | Co-founder and CEO | dates not stated | METR; Adam Gleave; European Commission | bc848e2fb8 |
| Kyle Scottslice | between | Board member, Palisade Research, "previously the Operations Manager at" METRnames this evaluator alongside its own organization | Board member | dates not stated | Palisade; ARC | 1acbe24f08 |
| Yoshua Bengioslice | between | Adviser, METR | Adviser | dates not stated | LawZero; METR; Transluce; Alignment Project | 93376e45c3 |
| Yoshua Bengioslice | between | LawZero, where Steinhardt and Irving are scientific advisors, as is METR's chief executive Beth Barnesnames this evaluator alongside its own organization | not stated | dates not stated | LawZero | 55144d6194 |
| Marco Mascorroslice | between | Adviser, METR | Adviser | dates not stated | METR; Mechanize | 3e81dfb1d4 |
Role read 13 of 15Organization read 15 of 15Organization profiled 15 of 15Dated 4 of 15
Moves
| Person | From | To | When | Source | Id | |
|---|---|---|---|---|---|---|
| Quentin Feuillade-Montixislice | MATS scholar; METR (contractor, evaluating GPT-4 pre-release) | → | PRISM Eval (co-founder); WeaveMind (Seldon Lab batch 2) | after MATS | MATS, Alumni | 77ef05ac7c |
| Beth Barnesslice | OpenAI | → | Alignment Research Center (ARC Evals), then METR | Summer 2022; Dec 2023 | AXRP 34; METR | 208503bfc8 |
| Ajeya Cotraslice | Coefficient Giving , technical AI safety grantmaking; Redwood Research board (to Aug 2024) | → | METR technical staff; Epoch AI board | 2024 to 2026 | Coefficient Giving; METR; Epoch AI | 8a94650c89 |
| Ryan Greenblattslice | Redwood Research (Chief Scientist) | → | METR (contractor Jul to Aug 2026; technical staff 27 Sep 2026) | 2026 | METR; his post | 9f8348de0c |
| Adam Gleaveslice | Google DeepMind | → | FAR.AI (co-founder); METR board | 2022 onward | Adam Gleave; METR | 5a1583e750 |
| Kyle Scottslice | METR (Operations Manager) | → | Palisade Research board; ARC Treasurer | by 2026 | Palisade; ARC | 7a4af92c25 |
From profiled 6 of 6To profiled 5 of 6Person profiled 5 of 6Dated 6 of 6
Filings
- IRS (via ProPublica Nonprofit Explorer) 99-1219864: no return read yet read 2026-10-17ProPublica Nonprofit Explorer 9a5ad5e313