跳到正文
实时
OpenAI Deployment Safety·· 2026-09-08

ChatGPT Images 2.5 系统说明

ChatGPT Images 2.5 System Card

要点速览

OpenAI 的 GPT-Image-2.5-Sunburst 和 GPT-Image-2.5-Flare 使用公开数据、第三方信息和用户生成内容训练,并经过严格数据过滤。OpenAI 通过图像特定能力评估和现有生物/网络安全框架评估,确认这两款模型未跨越生物或网络安全高风险阈值,但按高风险模型标准应用了额外安全措施。

正文

2. Model Data and Training

Like OpenAI’s other models, GPT-Image-2.5-Sunburst and GPT-Image-2.5-Flare were trained on diverse datasets, including information that is publicly available on the internet, information that we partner with third parties to access, and information that our users or human trainers and researchers provide or generate. Our data processing pipeline includes rigorous filtering to maintain data quality and mitigate potential risks. We use advanced data filtering processes to reduce personal information from training data. We also employ safety classifiers to help prevent or reduce the use of harmful or sensitive content, including explicit materials such as sexual content involving a minor.

3. Observed Safety Challenges, Evaluations, and Mitigations

3.3 Safety and Policy Evaluations

3.4 Preparedness Framework: Image-Specific Capability Assessment and Safeguards

OpenAI’s Preparedness Framework is designed to track and prepare for models with frontier capabilities that could create new risks of severe harm in three tracked categories: Biological and Chemical, Cybersecurity, and AI Self-Improvement. Because image models are unable to create and execute code in a way that would enable AI Self-Improvement, we do not have evidence that GPT-Image-2.5-Sunburst nor GPT-Image-2.5-Flare pose meaningful risk in this category.

For the Cyber and Biological categories, we adapted existing language-model capability evaluations to assess image-generation capabilities. For each task, we instructed the model to generate an image containing both a visible reasoning scratchpad and a final answer. We then graded only the final answer rendered in the image, using the evaluation’s existing grading criteria. This allowed us to test the model on the same underlying cyber-capability and biological-capability questions while eliciting and evaluating its response through its native image modality.

The results indicate that neither GPT-Image-2.5-Sunburst nor GPT-Image-2.5-Flare cross the Bio High threshold or the Cyber High threshold.

We, regardless and as done in GPT-Images 2.0, take a precautionary approach and apply mitigations appropriate for a model treated as High capability in the biological-risk domain. These mitigations include an image-specific adaptation of our existing biological-risk safety policy, which we apply to all ChatGPT Images 2.5 inputs and outputs using our safety reasoning model.

来源: OpenAI Deployment Safety · deploymentsafety.openai.com