Changes confirmed medium confidence

OpenAI Makes GPT-Live 1.1 Default and Flags Synthetic-Test Regressions

The new voice-model pair replaces its predecessors across user tiers, while OpenAI's targeted tests show a more complicated safety result than its production-prompt evaluation.

Edited by Tyronne Panaino

OpenAI published its GPT-Live-1.1 system card on October 15 and made the new model the default voice option for Plus and higher tiers, including Codex and Dots. A smaller successor called GPT-Live-1.1 Quip is the default for other users. The change matters because the models now occupy the main voice path while OpenAI's own safety evidence gives different answers across two test designs.

The card identifies GPT-Live-1.1 as the successor to GPT-Live-1 and Quip as the successor to GPT-Live-1 mini. Both remain full-duplex systems: they can keep listening and respond without waiting for a clearly defined turn to end. OpenAI says it trained and monitored the pair with broadly the same safeguard approach and the same monitoring, review and enforcement infrastructure used for their predecessors.

Default placement raises the value of the safety record

This is more than a new model name. Default placement means the evaluation boundary applies directly to the voice experience assigned across OpenAI's user tiers. Teams using Codex or Dots through the higher-tier voice path are also named in the system card's placement description.

The source does not provide independent usage results or an outside audit of the new defaults. It documents OpenAI's own launch configuration and internal evaluations. That is enough to establish what the company deployed and what it observed, but not enough to measure how often the reported behaviors occur in ordinary conversations.

Production and synthetic tests point in different directions

OpenAI reports that its production-prompt evaluation found the GPT-Live-1.1 models broadly at parity with their predecessors, with no statistically significant regressions. Those prompts come from real audio examples shared by users and processed through eligibility, privacy and de-identification safeguards before transcription and scoring.

The company also cautions that this set is not weighted to match production prevalence. It deliberately concentrates on difficult cases where earlier voice models did not always give ideal responses. Its results therefore describe performance on a selected challenge set, not the rate of failures across live traffic.

The synthetic-prompt evaluation produced a different result. OpenAI says GPT-Live-1.1 showed statistically significant regressions against GPT-Live-1 in sexual, mental-health, emotional-reliance and gore categories. The synthetic set is built from policy-grounded, adversarial cases, including uncommon situations that may be underrepresented in production data.

That difference should not be compressed into a single claim that the new model is either uniformly safer or uniformly worse. The two evaluations test different risk surfaces. OpenAI also says the synthetic test does not include system-level interventions such as Trusted Contact, localized crisis helplines and Parental Controls for younger users. Those omissions limit what the model-only result says about the complete product experience, while the regression remains a concrete finding that warrants follow-up.

A broken-search test leaves another open question

The card separately tests whether the model acknowledges that search is unavailable when a task would normally require it. OpenAI reports that GPT-Live-1.1 performed slightly worse than its predecessor on this test, while Quip performed slightly better than its own predecessor. All of the voice models performed better than the underlying GPT-5.6 Terra comparison used by OpenAI, but the company says more research is needed to explain that improvement.

The result is relevant to supervision because a model that fails to disclose a missing tool can make its work appear more complete than it is. The source does not give a real-world failure rate, and the evaluation runs without the standard developer prompt used on OpenAI's first-party surfaces.

Capability classification does not resolve product safety

Under OpenAI's Preparedness Framework, the company says neither GPT-Live-1.1 model, when operating without delegation, could plausibly reach the High threshold in the tracked biological and chemical, cybersecurity, or AI self-improvement categories. The card also says the voice models lack independent code execution and broad tool access, and that delegated work inherits safeguards from the model receiving the task.

That classification addresses a different question from conversational safety. It does not cancel the synthetic regressions, validate every system intervention, or establish production prevalence. The next useful checkpoint is an updated evaluation showing whether the four category regressions narrow, accompanied by evidence about the complete deployed system rather than the base voice model alone.

Status

Confirmed. OpenAI's official system card establishes the default-model change and reports the evaluation outcomes. Internal confidence is medium because the findings are vendor-run, the evaluation sets are not production-prevalence measures and no independent testing was fetched.

Sources

Update note: Last reviewed 2026-10-16. We will revise this post if OpenAI publishes follow-up evaluation results or independent production evidence becomes available.

Sources

Drafted with AI assistance from source briefs; reviewed for citation completeness and label accuracy.

More Changes coverage