What's this about?
Astra will be available "soon", but access to its most advanced cybersecurity capabilities will be more limited: initially a group of testers, with access through Daybreak Blue following, to expand defensive use. And an important footnote on the benchmarks: "Astra results shown reflect capabilities with Daybreak Blue access, not the default production configuration."
What does that footnote actually mean?
That the numbers you just read describe a configuration most users will not get. The headline result — 100% on ExploitBench, novel zero-days, full browser compromise chains — is what the model does with elevated access, not what ships by default. This is honest disclosure and it is easy to miss. It also means the capability exists and the gating is a policy layer, which is the same structure as Anthropic's Fable/Mythos split: one set of weights, tiered access.
Why does this matter to you?
- Every headline about this model's capability should carry that footnote and most will not.
- "Expanding defensive use" is the stated purpose, and it is the argument the collective cyberdefense letter made a week ago.
- Tiered access shifts the security question from "what can the model do" to "who is on the list, and how is that enforced."