OpenAI released three variants of GPT-5.6 on Friday as limited previews to select companies working with U.S. government agencies. The rollout represents a controlled approach to deploying increasingly capable AI systems alongside stronger security measures.

Sol serves as the flagship model with maximum performance capabilities. Terra offers a middle ground between computational efficiency and raw power. Luna prioritizes speed and cost optimization for resource-constrained deployments.

The restricted access model limits initial exposure to vetted organizations, allowing OpenAI to monitor real-world performance and identify potential misuse vectors before wider availability. This approach reflects growing industry recognition that advanced AI systems require graduated rollout strategies.

OpenAI emphasized enhanced cyber safeguards across all three variants. The company integrated additional guardrails designed to prevent malicious prompt injection, code generation for unauthorized access, and social engineering assistance. These protections target both direct attacks on the models themselves and downstream risks from users attempting to weaponize outputs.

The government engagement component indicates coordination between private AI developers and federal agencies on responsible deployment frameworks. Such partnerships help establish baseline security practices and create feedback loops for identifying novel attack patterns.

Organizations receiving preview access gain early exposure to the latest capabilities but face higher scrutiny around usage patterns and security posture. This creates mutual accountability where access depends on demonstrated commitment to protecting the systems from adversarial use.

The tiered release strategy acknowledges that different operational contexts require different capability-to-safety ratios. Speed-optimized models like Luna may sacrifice some safety verification for latency, creating distinct risk profiles across variants.

OpenAI's preview framework allows the company to gather empirical data on how restricted access actually prevents harmful outputs compared to unconstrained deployments. Results from this phase will likely inform policies for broader commercial availability.

The cyber safeguards focus on preventing both direct attacks on the models through adversarial inputs and indirect exploitation where outputs enable attack