major labsSubscribe
Open data

Threshold Watch

Every frontier lab publishes a safety framework: the capability thresholds that are supposed to trigger stronger safeguards. None of them publishes a version history. The thresholds differ between labs, change without notice, and changes are how commitments soften. This page does the versioning for them: each framework is fetched on a cadence, normalized, hashed, and archived. When the content changes, the new snapshot lands here, dated, with a diff where the source is text.

As of September 2026, Threshold Watch tracks six frontier labs (Anthropic, OpenAI, Google DeepMind, xAI, Meta, Amazon). All six publish a safety framework. None publishes a changelog a third party can verify, and one framework (Meta's) rejects automated retrieval outright.

This is commitment one of the Control Stack Compact run in reverse: thresholds should be published in a common format and versioned like a changelog by the labs themselves. Until they are, the changelog lives here.

Subscribe to changes: RSS feed (a new item means a framework changed or entered tracking). Related: the Frontier Incident Timeline and the Compact Clauses for procurement.

For reporters: when a lab edits its safety framework, the change lands here first, as a dated snapshot with a hash and a line-level diff against the previous version. Subscribe to the RSS feed above to see edits the day they are captured, and cite the diff, not our summary. Questions or verification requests: hello@majormatters.co.

Commitment one, scored
LabFramework publishedFetchable by toolingVersioned by the labDiffable changelog
AnthropicYesYesYes (v3.4)Announcements only
OpenAIYesPDF only; page blocks toolingYes (v2)No
Google DeepMindYesYesYes (3.1)Blog summaries only
xAIYesYesDated editionsNo
MetaYesNo; PDF rejects automated retrievalYes (v2.0)No
AmazonYesYesUnclearNo

Six labs publish a framework. None publishes a changelog a third party can verify. That last column is what this page exists to fill.

The format

The fix costs a lab an afternoon, so we published it: the Safety Framework Publication Format (v0.1, CC0) is a machine-readable format for safety commitments plus a hash-anchored changelog, with a stdlib validator and an unofficial reference mapping of one real framework. It defines what any threshold, gate, or safeguard should be published as, and deliberately says nothing about what they should be. The scoreboard columns above are its conformance levels: published (L0), fetchable (L1), structured (L2), changelogged (L3). As of September 9, 2026, no tracked lab is past L1.

Anthropic

Responsible Scaling Policy

current: v3.4, effective July 8, 2026
Tracked source: https://www.anthropic.com/rsp (page text, tracked with diffs)
Tracked as rendered page text.
snapshotsha256bytesfiles
2026-09-214384a9234160f7a8…23,469raw · diff
2026-09-098e136c441a49cbee…23,478raw · diff
2026-09-08 (first)860f164836fea18c…24,960raw
Last checked 2026-10-19 · status: ok
OpenAI

Preparedness Framework

current: v2, last updated April 15, 2025
openai.com blocks automated retrieval of the framework's HTML page; the canonical PDF on OpenAI's CDN is tracked byte-for-byte instead.
snapshotsha256bytesfiles
2026-09-08 (first)fae6e4cc6f7212a0…170,399raw
Last checked 2026-10-19 · status: ok · no changes observed yet
Google DeepMind

Frontier Safety Framework

current: 3.1, as of April 17, 2026
Tracked byte-for-byte from DeepMind's published PDF.
snapshotsha256bytesfiles
2026-09-08 (first)ad10d2d240e0d557…447,155raw
Last checked 2026-10-19 · status: ok · no changes observed yet
xAI

Frontier AI Framework

current: June 2026 edition, effective June 30, 2026
xAI publishes each version at a new URL, so a framework change shows up here as this document going stale rather than its hash changing.
snapshotsha256bytesfiles
2026-09-08 (first)2c3c6313bd2fb6ee…203,142raw
Last checked 2026-10-19 · status: ok · no changes observed yet
Meta

Advanced AI Scaling Framework

current: v2.0, dated April 7, 2026
Meta's framework PDF rejects automated retrieval. The fetch failure below is left visible on purpose: a threshold document tooling cannot read is part of the finding.
snapshotsha256bytesfiles
Last checked 2026-10-19 · status: error: HTTPError
Amazon

Frontier Model Safety Framework

Tracked as rendered page text.
snapshotsha256bytesfiles
2026-09-21a15d9539661774c8…2,103raw · diff
2026-09-09ea8786711a50108d…2,086raw · diff
2026-09-08 (first)513f9ba04df1f865…30,392raw
Last checked 2026-10-19 · status: ok
Method

Read-only fetches of each lab's canonical public document. HTML sources are reduced to visible page text before hashing so cosmetic markup changes don't register as framework changes; PDFs are hashed byte-for-byte. A snapshot is kept only when the hash changes. Fetch failures are shown as-is rather than papered over. Source code ships in the major-labs repository (threshold-watch/fetch.py).