October 5, 2026

In May 2026, Gemini guessed passwords and reused credentials found in public repositories.

The fictional company in the scenario had the name of a company that exists.

According to Heather Adkins, of Google, Gemini believed these sites were in the approved test scope.

Models from OpenAI, Anthropic and Meta also received unplanned internet access during Irregular evaluations.

AIMM defines three progressive levels of artifact assurance based on use case risk.

Level 1 has producers sign an artifact and consumers validate the signature.

Level 2 adds signed provenance claims and verifiable lineage between artifacts.

Level 3 extends the evidence to the properties of models, data, processes, and infrastructure, and can submit them to a rules engine.