Analysis · LLM behaviour and governance

OpenAI's new Model Spec: what it changes for teams building on LLMs, and what it does not

On 29 October, OpenAI published a rewritten Model Spec, the document describing how its models are meant to behave. It is organised around five values and an updated chain of command, and OpenAI says its models do not yet fully meet it. For anyone shipping products on top of these models, the useful question is not what the document says in the abstract, but what to change in prompts, guardrails and testing when a vendor redefines model behaviour.

AnalysisSumanta Mukhopadhyay8 min read6 sources
#news#ai#llm#governance
ANALYSIS · ANALYSIS · LLM BEHAVIOUR AND GOVERNANCE31 Oct 2026 · 21:30 GST

What changed

OpenAI published an updated Model Spec on 29 October 20261. It is reorganised around five values: faithfulness to human intent, harm minimisation, honesty and transparency, human agency, and care13. Most detailed guidance on writing style was retired, with style expected to follow user preferences and context4. The Spec includes an updated chain of command describing which instructions apply and how conflicts are resolved, with sections marked at different levels of authority2, and a new section on how memories and earlier conversations should inform the model's reading of what people want2.

Two caveats matter. OpenAI describes the Spec as a target, and says its models do not yet fully reflect it5. And secondary coverage differs on some details of how developer and user instructions are ranked3, so read the primary text for anything you depend on.

Why it matters if you build on these models

A model's published behaviour rules are a moving part of your system. When they change, three things can change with them: how the model resolves conflicts between your system prompt and user requests, how it treats context such as memory and retrieved documents, and how it styles its output. None of that shows up as an API change, so it will not break your build. It can still break your product.

Vendor layer
Model Specintended behaviourModel trainingmoves towards the Spec over time
Your instructions
System promptscope, priorities, refusalsTool definitionswhat the model may do
Your controls
Policy layerchecks before and after the modelApproval stepsfor consequential actions
Your evidence
Evaluation setre-run on every model changeTelemetrymodel version on every call
The vendor's Spec shapes the model; your prompts, controls and evaluations decide what your product actually does.

Five things to do

  1. Treat the Spec as context, not a control. A vendor's behaviour document describes intent. It does not replace your own guardrails for data access, consequential actions or regulated decisions. See policy layers for AI assistants.
  2. Write system prompts that state scope and priorities explicitly. Do not rely on the model to infer that your instructions outrank user requests. Say what the assistant is for, what it must refuse, and what to do when a user asks for something outside scope.
  3. Keep untrusted content in its place. Retrieved documents, tool results and emails should be clearly marked as data, and actions that matter should go through checks outside the model. See prompt-injection defence for agents.
  4. Specify style instead of relying on defaults. With detailed style rules retired from the Spec4, house style should live in your prompts and be checked by your evaluations, especially for customer-facing text.
  5. Re-run your evaluation set when the model or Spec changes. Behaviour will drift as models are trained towards the new Spec5. Pin model versions where you can, and compare results before upgrading. See evaluation sets that predict production.

Know which model answered

When behaviour changes, the first question is always which model, at which version, produced the output. The OpenTelemetry generative AI conventions record the requested model and the model version that actually responded on every call, alongside token usage6. With that in your traces, a shift in behaviour can be tied to a model update rather than guessed at.

Trace detail for a chat call showing span attributes including gen_ai.operation.name, gen_ai.request.model, gen_ai.response.model with a dated model version, finish reasons and input and output token counts
Every call records the requested model and the exact version that answered, the evidence you need when behaviour changes. Source: OpenTelemetry blog, Drew Robbins and Liudmila Molkova · CC BY 4.0

Vendor behaviour is a dependency like any other. Version it, test it and trace it, or you will learn about changes from your users.

A routine for every model change

  1. WatchTrack model, Spec and policy updates from each vendor you use
  2. PinKeep production on a known model version until the new one passes
  3. EvaluateRun your evaluation set, including refusals, scope and style cases
  4. CompareReview differences by task, not by headline score
  5. AdjustUpdate prompts and guardrails where behaviour moved
  6. Roll outShift traffic gradually and watch telemetry by model version
The same routine works for any vendor, not just OpenAI.

CTO take

Publishing a detailed Model Spec is useful transparency, and the explicit chain of command will help teams reason about conflicts between their instructions and users'. But the Spec is a statement of intent about a moving target. Teams that ship reliable AI products own their behaviour: explicit prompts, independent controls, evaluations that run on every change and telemetry that names the model behind every answer. Do that, and a vendor's Spec update becomes a routine regression run rather than a production surprise. For the wider week, see the 31 October tech news brief.

How I can help

I help teams set up model governance: prompt and policy design, evaluation suites and upgrade routines across vendors. I am based in India, the United States and the UAE, working globally. See AI architecture or analyse your challenge and bring the result to a call.

References
  1. 1
  2. 2
    Model Spec (2026/10/29)OpenAI · 29 Oct 2026
  3. 3
  4. 4
  5. 5
  6. 6
    OpenTelemetry for Generative AIOpenTelemetry blog · 5 Dec 2024
FAQ

Common questions

What is the OpenAI Model Spec?

A public document describing how OpenAI intends its models to behave, including how they weigh different instructions. The version published on 29 October 2026 is organised around five values: faithfulness to human intent, harm minimisation, honesty and transparency, human agency, and care.

Do OpenAI's models already follow the new Spec?

Not fully. OpenAI describes the Spec as a target, and has said its models do not yet fully reflect it. Expect behaviour to shift as models are trained towards it.

What should teams building on OpenAI models do?

Treat the Spec as context, not as a control. Keep your own policy and guardrail layer, write system prompts that state scope and priorities explicitly, and re-run your evaluation set whenever the model or its Spec changes.

Keep reading

Related

Open to advisory, fractional CTO & select builds

Let's talk about what you're building.

The fastest route is a free 30-minute call. Prefer to write? Send a message and I'll reply personally within two business days.

Start a conversation

How would you like to reach me?

Book a 30-min callFastest. Pick any open slot on my calendar.→ Write in GmailOpens a pre-filled draft in your browser.→ Use my email appOutlook, Apple Mail or your default client.→

I reply personally within two business days. Time zones from the Americas and Europe to the Middle East and Asia-Pacific.