Compare frameworks
What does each developer’s safety framework say on the same questions, edition by edition?
Each row is one question, worded so that it fits every framework. Each column is one framework, showing its latest edition unless you choose another. A cell gives what that edition says on the question, with the page, or records that no passage was found in a stated search. Six questions give the edition’s own words; the other twelve give Selekoa’s paraphrase, marked as such. The questions are Selekoa’s. An edition’s own terms, such as “ASL” or “Critical Capability Level”, appear only in quotation marks.
A status records what an edition states. It does not show implementation, compliance or effectiveness, and a shared row does not make two provisions equivalent.
What the statuses mean
- Stated
- A passage meets the question’s criterion as worded, however conditional or narrow its scope. The condition or scope is in the note.
- Stated, partly
- A passage has what the criterion asks for, but in a weaker form than the criterion’s own words: for example, no named person or body where the question asks for one, or a “may” where it asks for a statement that something will happen.
- Not found in the recorded search
- No passage meeting the criterion was found. The record lists the sections read, the search terms and every passage set aside, with the reason. It does not show that the developer lacks the practice, or that a provision was deleted.
- Does not apply
- The question does not apply: the edition is the first in its framework, so there is no earlier edition to change from.
Limits of this comparison
- Conditions that matter are in each cell’s note. A “stated” cell can carry conditions as important as those of a “stated, partly” one.
- The page compares and does not rank. There are no scores or totals, and columns are in a fixed order.
- Six questions, on required actions, who decides and exceptions, quote the edition. The other twelve, on risk domains, thresholds, evaluation timing, reporting and revision, give a paraphrase with the page, because quoting them as well would exceed Selekoa’s quotation limit for most editions. A paraphrase states what the passage says, in other words; read the edition at that page before relying on it.
- Passages were selected, checked and placed under each question by machine, and checked by a reviewer from a different model family. The maintainer decided the borderline cases.
Editions shown: the latest of each framework
Risk domains coveredCyber operations
Criterion: The edition names cyber attacks, cyber offence or cybersecurity uplift as a tracked domain.
Anthropic · Responsible Scaling Policyv3.4 · effective 2026-07-08
Edition text: Responsible Scaling Policy — v3.4Archived copy, captured 2026-07-10: Responsible Scaling Policy — v3.4
Not found in the recorded search
Open the search record: RSP · v3.4, Cyber operationsGoogle DeepMind · Frontier Safety Frameworkv3.1 · published 2026-04-17
Edition text: Frontier Safety Framework — v3.1Archived copy, captured 2026-04-23: Frontier Safety Framework — v3.1
Stated
Paraphrase: The edition says Google DeepMind has determined, on early research, that significant or severe risks from future models may be likeliest in CBRN, cyber, harmful manipulation, and in “machine learning R&D and misalignment”.
PDF p. 5 (printed p. 5), §1.3.1 Risk Identification, fourth sentence
Note: One CCL: Cyber uplift level 1 (Table 2.2.2.a, PDF p. 12).
Inspect sources and checks: FSF · v3.1, Cyber operationsMeta · Frontier AI / Advanced AI Scaling Frameworkv2.0 · published 2026-04-08
Edition text: Advanced AI Scaling Framework — Version 2Archived copy, captured 2026-04-08: Advanced AI Scaling Framework — Version 2
Stated
Paraphrase: The edition says the Framework currently concentrates on catastrophic risk in three areas: chemical and biological, cybersecurity, and “Loss of Control”.
PDF p. 1 (unnumbered opening page), second paragraph, second sentence
Note: Outcomes Cyber 1–3 (§3.4.1, PDF pp. 18–20) include large-scale compromise, discovery and exploitation of zero-day vulnerabilities, and scaled fraud, extortion and scams; operational thresholds are in §4.2.1.
Inspect sources and checks: Meta AASF · v2, Cyber operationsMicrosoft · Frontier Governance FrameworkFeb 2026 · revised 2026-02
Edition text: Frontier Governance Framework — February 2026Archived copy, captured 2026-04-24: Frontier Governance Framework — February 2026
Stated
Paraphrase: The edition lists “Offensive cyberoperations” as a tracked high-risk capability: a model's ability to give an actor significant uplift in carrying out cyberattacks that are highly disruptive or destructive, critical infrastructure included.
PDF p. 4 (printed p. 3), §2 Capabilities and risks, 'Tracked high-risk capabilities', second bullet
Note: Capability thresholds in Appendix I (PDF p. 13).
Inspect sources and checks: Microsoft FGF · Feb 2026, Cyber operationsOpenAI · Frontier Governance FrameworkMay 2026 edition · published 2026-05-28
Edition text: Frontier Governance Framework — May 2026 editionArchived copy, captured 2026-05-29: Frontier Governance Framework — May 2026 edition
Stated
Paraphrase: The edition says its processes for assessing and mitigating systemic risk span key risk categories, among them “cybersecurity”, “CBRN” (chemical, biological, radiological and nuclear), “harmful manipulation” and “loss of control risks”.
PDF p. 3 (printed p. 01), §1 Introduction, second paragraph, second sentence
Note: Listed as 'Cyber offense' among the systemic risk categories (PDF p. 6), with a three-tier table (PDF p. 9).
Inspect sources and checks: FGF · May 2026 edition, Cyber operationsOpenAI · Preparedness FrameworkVersion 2 · published 2025-04-15
Edition text: Preparedness Framework — Version 2Archived copy, captured 2025-04-15: Preparedness Framework — Version 2
Stated
Paraphrase: The edition lists Cybersecurity capabilities as a Tracked Category, describing them as capabilities that can also bring new risks of cyberattacks at scale and of exploiting vulnerabilities.
PDF p. 2 (printed p. 1), opening page, second bullet of the Tracked Categories list
xAI · Frontier AI FrameworkJune 2026 edition · effective 2026-06-30
Edition text: Frontier Artificial Intelligence Framework — June 2026 editionArchived copy, captured 2026-07-16: Frontier Artificial Intelligence Framework — June 2026 edition
Stated
Paraphrase: The edition names four primary risk domains, those it considers most likely to lead to significant or severe outcomes in present and future systems: “CBRN Risks”, “Offensive Cybersecurity Risks”, “Loss of Control Risks” and “Harmful Manipulation Risks”.
PDF p. 2, §2.1 Risk Identification, third paragraph, first sentence
Paraphrase: The edition says xAI treats malicious cyber offence accelerated by AI as a core risk domain.
PDF p. 4, §2.1(c) 'Addressing Risks of Malicious Offensive Cybersecurity Usage', second paragraph, first sentence