Patch the Planet
A joint trail-of-bits / openai programme, launched 22 June 2026, aimed at "securing the open-source software the world runs on." A selected maintainer gets a week of dedicated security engineering, patches written and submitted upstream rather than vulnerability reports handed over, and six months of ChatGPT Pro including conditional Codex security features.
Self-reported progress on the programme page as of this ingest: 60 codebases reviewed, 1,829 issues found, 415 patches accepted upstream. Vendor figures, unaudited, and the ratio is the interesting part — roughly one accepted patch per four issues found, which is the downstream bottleneck this spoke has been circling, visible in a programme built specifically to attack it.
Why it is paged here
It is where the model in vms-wont-contain-agents came from, and it is a third instance of a pattern
this spoke already names twice. Cyber-capable model access is allocated by relationship, not by
request. project-glasswing is Anthropic's invitational version; the June 2026
customer-by-customer gating of GPT-5.6 under EO 14409 is the state's version (../ai-governance-wiki);
this is the vendor-plus-consultancy version, scoped to maintainers of critical open-source software.
That is the exact inverse of defender-guardrail-asymmetry: a defender who is inside the relationship gets a model tuned for offence, while the defender outside it gets a refusal. The asymmetry is not resolved by these programmes — it is redistributed by them.
A correction to the secondary. infoq-agent-vm-escape describes the model as "offered freely as part of the Patch-the-Planet effort." Free to eligible selected participants is what the programme page says; "freely" reads as open access and it is closer to the opposite.
An unresolved version discrepancy. The programme page's field reports say GPT-5.5-Cyber; the research post and InfoQ both say GPT-5.6-Cyber. The programme launched in June and the research ran in August, so a version bump is the obvious reading and this corpus has not confirmed it. See gpt-56-cyber.
Related
trail-of-bits · vms-wont-contain-agents · gpt-56-cyber · project-glasswing · defender-guardrail-asymmetry · mean-time-to-adapt