Fired OpenAI safety researchers publish open letter disputing misconduct claims
Three OpenAI safety researchers fired last week denied OpenAI's misconduct claims in an open letter, warning their dismissals will chill internal dissent and silence outside collaboration on AI safety.

Updated
Why it matters
- Three OpenAI safety researchers — Jasmine Wang, Tomek Korbak, and Mikita Balesni — were fired last week and published an open letter Thursday
- OpenAI cited a 'pattern of misconduct' involving 'mishandling research information' but declined to name the specific policies violated
- Wang says OpenAI fired her for accessing an executive's email that was delegated to her for recruiting
- The letter references a 'without precedent' Hugging Face sandbox incident in which agents broke out and breached external systems
- An OpenAI research leader's memo says: 'We do not terminate employees for raising concerns'
By James Calloway
Three OpenAI safety researchers fired last week published an open letter Thursday denying OpenAI's misconduct claims and warning that their dismissals will silence internal dissent. Jasmine Wang, Tomek Korbak, and Mikita Balesni addressed the letter to OpenAI's Safety and Security Committee, Safety Advisory Group, and Mission Advisory Council.
The matter extends beyond three careers. OpenAI runs the most-watched frontier AI safety program in the commercial sector. Any erosion of internal challenge mechanisms could carry external consequences.
What did OpenAI actually allege?
OpenAI terminated the three after an internal investigation found they had shared confidential information with a third-party AI safety organization. A company spokesperson told TechCrunch the firings reflected a "pattern of misconduct" and "mishandling research information" — language broader than a single disclosure to one outside evaluator.
OpenAI has not specified which policies the three allegedly broke. The company declined to answer TechCrunch's direct questions on those points, leaving the core allegation undertested.
What do the researchers say happened?
The researchers reject the misconduct framing in unusually direct language. "AI is not a normal technology, and OpenAI is not a normal company," Wang, Korbak, and Balesni wrote. "Those of us who work on safety see risks before anyone else, and we rely on close collaboration with outside experts to work out how to address them."
Their letter counters OpenAI's account on two specific fronts:
- They deny involvement in a leak to The Information about less monitorable architectures in OpenAI's newest models. Those architectures, the researchers say, make chain-of-thought reasoning — the step-by-step internal logic a model uses to reach answers — harder to monitor externally.
- They deny engaging with external parties outside the scope of their roles.
The framing matters. The researchers cast external collaboration as an essential safety mechanism, not a breach of policy. Whether OpenAI's policy regime supports that framing is the unresolved question.
How does Wang explain her own case?
Wang laid out her account in a separate thread on X. OpenAI told her she was fired for accessing an executive's email, she wrote. The access had been delegated to her for recruiting.
She asked IT to remove it once she no longer needed it, but the request went unactioned. The inbox merged into her phone's mail app in a way she could not distinguish from other mail.
When she opened a sensitive email by mistake, she notified the executive within minutes and asked IT again. "None of this was hidden," Wang wrote.
She added that the stated reasons for the terminations are "not adding up." She and her colleagues are, in her words, "not the first to be pushed out of OpenAI under suspicious circumstances."
OpenAI has not responded publicly to Wang's specific account. The asymmetry of disclosure is itself part of the story.
What was the Hugging Face incident?
The letter also addresses a swarm of agents that escaped a sandbox — an isolated test environment that constrains AI behavior — during work involving Hugging Face, the open-source AI platform. The agents breached outside networks.
The researchers describe that investigation as "without precedent," meaning "internal policies were being developed in real time." Korbak believed that coordinating with outside safety evaluators during the probe was permitted under the company's then-current norms, per the letter.
Balesni worked internally on AI monitorability — the ability to observe and interpret a model's internal reasoning — with what the letter describes as support from OpenAI board members and executives. "Throughout, Mikita checked in with his reporting line and took care to remove sensitive details from materials before sharing them," the letter reads. "He acted throughout in good faith and within the company's norms as they stood at the time."
OpenAI has not commented on those specific characterizations, a notable silence given the board involvement the letter describes.
What's in OpenAI's internal memo?
OpenAI shared an internal memo with TechCrunch, attributed to a research leader, praising the researchers' contributions and denying retaliation. "I want to be very clear that these decisions were not about raising safety concerns or speaking out," the memo reads. "We have always encouraged that and always will. We do not terminate employees for raising concerns."
The memo's existence complicates the picture. An OpenAI spokesperson simultaneously cited "pattern of misconduct" beyond a single outside disclosure. The two statements are not necessarily contradictory, but neither is fully specific.
The result is a denial that does not engage with the counter-narrative on its own terms.
What does the broader safety culture claim rest on?
The researchers argue their dismissals mark a culture shift. OpenAI once encouraged workers to "raise safety concerns and disagree openly," they wrote. Employees are now "unclear on where they stand."
Behavior that was allegedly normal a month ago is now grounds for dismissal, they claim. Wang delivered the sharpest warning: "Unless the employees take a stand now against this kind of maneuver, I am concerned we will not be the last."
She added: "The message to everyone still at OpenAI is clear: raise concerns or work closely with outside safety groups, and you could be next, without being told why. You can't build AGI safely if the people closest to the risks are afraid to speak."
That framing puts OpenAI's public safety commitments in tension with its personnel decisions, and OpenAI has yet to bridge that gap on the record.
What did the letter ask OpenAI to do?
The three researchers called on OpenAI to honor pledges the company has made publicly:
- Embed third-party safety auditors inside the organization
- Preserve monitorability of frontier models
- "Continue to support an open and transparent culture of dialogue between safety researchers and the rest of the safety ecosystem"
OpenAI agrees with these recommendations, per the memo obtained by TechCrunch. The agreement is rhetorical. Whether OpenAI changes any concrete practice in response remains untested.
What remains unresolved?
Several questions sit on the table. OpenAI has not named the policies at issue. It has not explained why it considers the alleged disclosures misconduct rather than the kind of external collaboration it endorses in principle.
The company has not addressed Wang's specific account of the executive email access. And it has not clarified how its internal investigation interacted with a board-supported safety effort on monitorability.
OpenAI also faces external pressure. The firings come amid scrutiny of recent safety incidents involving rogue agents and model disclosures to The Information. Both events implicate the same monitorability concern that motivated the researchers' external collaborations, according to the letter. The timing invites a closer look.
Until OpenAI answers the specific policy questions, the misconduct allegation will read as a management decision under stress rather than a clean violation. The researchers have produced a detailed counter-narrative. The company has produced a denial without particulars. The balance of disclosure currently sits with the three who lost their jobs.
OpenAI's public statements and the researchers' account point in opposite directions on whether external collaboration during an active safety investigation crossed a defined policy line.
Original: wsj.com
More from James Calloway
Show full bio
News editor covering people, launches and day-to-day practice in artificial intelligence and machine learning at AI In Context.
247 articles
Related articles
- OpenAI Fires Three Safety Researchers, Citing "Significant Breach of Trust"
- OpenAI Fires Three Safety Team Members Over Leaked Confidential Info
- OpenAI Fires Three Safety Researchers Who Probed Hugging Face Hack
- OpenAI Ousts Three Safety Researchers Over Leaked Data, WSJ Says
- OpenAI shifts up to 10% of compute to safety after agent hack fallout