An assessment from published information, not a benchmark run. The most consequential thing OpenAI disclosed about Astra is not a capability score. It is a safety classification the company applied to its own product.
A chatbot produces text a person reads. An agent produces actions across systems, most of which nobody reads. The July incident at Hugging Face is the clearest published account of what that difference costs.
Astra began rolling out on 3 September, first to trusted partners and enterprise customers in OpenAI's Daybreak programme. It is the first OpenAI model classified at the Critical cybersecurity level under the company's own Preparedness Framework, which is the more consequential fact in the launch.