Addendum to GPT-5.2 System Card: GPT-5.2-Codex Aanvulling op GPT-5.2-systeemkaart: GPT-5.2-Codex

Addendum to GPT-5.2 System Card: GPT-5.2-Codex | OpenAI

Skip to main content

[](https://openai.com/)

* Research

* Products

* Business

* Developers

* Company

* Foundation(opens in a new window)

Log inTry ChatGPT(opens in a new window)

Try ChatGPT(opens in a new window)Login

OpenAI

December 18, 2025

PublicationSafety

Addendum to GPT‑5.2 System Card: GPT‑5.2‑Codex

Read the System Card(opens in a new window)

Introduction

GPT‑5.2‑Codex is our most advanced agentic coding model yet for complex, real-world software engineering. A version of GPT‑5.2⁠ optimized for agentic coding in Codex, it includes further improvements on long-horizon work through context compaction, stronger performance on project-scale tasks like refactors and migrations, and improved performance in Windows environments—and significantly stronger cybersecurity capabilities.

This system card outlines the comprehensive safety measures implemented for GPT‑5.2‑Codex. It details both model-level mitigations, such as specialized safety training for harmful tasks and prompt injections, and product-level mitigations like agent sandboxing and configurable network access.

GPT‑5.2‑Codex was evaluated under our Preparedness Framework. It is very capable in the cybersecurity domain but does not reach High capability on cybersecurity. We expect current trends of rapidly increasing capability to continue, and for models to cross the High cybersecurity threshold in the near future. Like other recent models, it is being treated as High capability on biology, and is being deployed with the corresponding suite of safeguards we use for other models in the GPT‑5 family. It does not reach High capability on AI self-improvement.

Addendum to GPT‑5.2 System Card: GPT‑5.2‑Codex

Read the System Card(opens in a new window)

Author

GPT‑5.2‑Codex is our most advanced agentic coding model yet for complex, real-world software engineering. A version of GPT‑5.2⁠ optimized for agentic coding in Codex, it includes further improvements on long-horizon work through context compaction, stronger performance on project-scale tasks like refactors and migrations, and improved performance in Windows environments—and significantly stronger cybersecurity capabilities.

This system card outlines the comprehensive safety measures implemented for GPT‑5.2‑Codex. It details both model-level mitigations, such as specialized safety training for harmful tasks and prompt injections, and product-level mitigations like agent sandboxing and configurable network access.

GPT‑5.2‑Codex was evaluated under our Preparedness Framework. It is very capable in the cybersecurity domain but does not reach High capability on cybersecurity. We expect current trends of rapidly increasing capability to continue, and for models to cross the High cybersecurity threshold in the near future. Like other recent models, it is being treated as High capability on biology, and is being deployed with the corresponding suite of safeguards we use for other models in the GPT‑5 family. It does not reach High capability on AI self-improvement.

* 2025

* System Cards

Author

OpenAI