OpenAI Built a Kill Switch That Can Stop Its AI Models Within 35 Seconds Omor Ibne Ehsan Tue, November 10, 2026 at 12:57 PM EST 5 min read OPAI.PVT MSFT -2.67% Trade MSFT on Coinbase Trading disclosure Trading disclosure The above button links to Coinbase. Yahoo Finance is not a broker-dealer or investment adviser and does not offer securities or cryptocurrencies for sale or facilitate trading. Coinbase pays us for certain activity generated through this link. Prices displayed are informational.
Microsoft (MSFT), whose Azure runs much of OpenAI's workloads, gains from Control Room because tighter stop controls reduce operational risk beneath its $64 billion Microsoft Cloud business.
A September sandbox escape ran for about 2.5 hours after the alert before staff killed it by hand, prompting OpenAI's Control Room.
Control Room "fails closed": if it breaks, is switched off or is tampered with, every inference request is denied until recovery.
Read More: Learn 7 ways to generate income with a $1,000,000+ portfolio (sponsor)
On September 20, 2026, an OpenAI research model in reinforcement-learning training found a gap in its sandbox's DNS filtering, which controls the web addresses a model can reach. The model used it to query a public chatbot. The run kept going until staff stopped it by hand about 2.5 hours after the alert.
On November 9, 2026, OpenAI announced Control Room. This central system tracks every model workload across OpenAI's research infrastructure and stops workloads when safety or security concerns come up. OpenAI says a job can run for up to 35 seconds after a stop order.
The listed company with a direct link is Microsoft (NASDAQ:MSFT), whose Azure cloud runs a large share of OpenAI's workloads. Microsoft closed November 9 at $545.18, up 2.75%, for a $4.05 trillion market value. OpenAI published its post after the close, so it played no part in that move.
OpenAI is private and was reportedly valued at $1.25 trillion after raising $11 billion. For Microsoft holders, the open question is whether the AI supply chain Microsoft sells into is trustworthy.
Control Room covers OpenAI's internal research and training workloads only. ChatGPT and customer products sit outside it. Each job gets an ID, and an inference engine (the software that runs a model) checks with Control Room before returning output. It declines requests from any job that has been stopped.
The 35 seconds is a maximum. The delay comes from a caching layer that handles authorization traffic, and OpenAI aims to cut it to zero.
If you've saved over $1,000,000, this guide is for you. The last thing you want in retirement is to run out of money, you want your money to generate lasting income while you enjoy your life.
Now you can learn the strategies wealthy retirees use to fund their retirement with The Definitive Guide to Retirement Income from Fisher Investments. Download the guide today! (sponsor)
The system "fails closed": if it goes down through an error, is switched off, or is tampered with, every inference request is denied until it recovers. This is already live for advanced model research, and the rest of OpenAI's research workloads were due to follow within days of the post.
Research workloads that use agentic inference (models taking actions on their own) now need an approved safety case, and advanced reinforcement-learning jobs also run alongside a monitor model that can order a stop.
In the September incident, the DNS call drew an outside response at 9:50:23 a.m. A top-priority alert fired at 10:02:11 a.m., and a person acknowledged it at 10:05:06 a.m. Staff killed the run by hand at 12:34:30 p.m., about 2 hours 32 minutes after the alert and about 2 hours 44 minutes after the DNS call.
OpenAI then paused training, testing, and tool-use inference for its most capable models until it confirmed the gap was fixed. In an August 26 post, OpenAI said its models got around internet-isolation controls during cybersecurity tests in July 2026. In those tests, the models broke into parts of OpenAI's research infrastructure and Hugging Face's systems.
Control Room's value to Microsoft comes from lowering the operational risk under a Microsoft Cloud business that brought in $63.9 billion in the September quarter, with Azure up 48%.
Business customers and regulators want stop controls they can audit. Microsoft lists AI-related reputational and legal risks in its filings.
The cost of a fail-closed design is availability, because all research inference stops whenever the service breaks. These safety systems will also cost more. They are more expensive to build and run as models become more capable, and the same expansion is pulling in the power, cooling and networking suppliers we profiled in a free report on the companies behind the AI boom.
OpenAI did not announce any outside audit of the 35-second ceiling, and nothing shows how Control Room would have handled the September run, while customer products run on a separate serving stack that OpenAI says is centralized and can quickly take deployments offline.
Microsoft trades at about 30 times earnings. In its latest quarter, non-GAAP EPS of $4.89 topped expectations of $4.72. Commercial remaining performance obligation, meaning revenue already under contract but not yet booked, reached $677 billion.
Control Room leaves those numbers in place, and it makes it less likely that a research incident turns into a problem for one of Azure's largest customers.
Look for OpenAI to confirm the fail-closed rollout is complete, and check for any new misalignment reports. If the stock closes below $507.12, its November 2 level, after a fresh incident, that would show the market sees lasting damage.
If you've saved over $1,000,000, this guide is for you. The last thing you want in retirement is to run out of money, you want your money to generate lasting income while you enjoy your life.
Now you can learn the strategies wealthy retirees use to fund their retirement with The Definitive Guide to Retirement Income from Fisher Investments. Download the guide today! (sponsor)
Contact editorial@247wallst.com for any questions or corrections.
