OpenAI Just Released ChatGPT Agent, Its Most Powerful Agent Yet
The OpenAI team details the creation of a new, powerful AI agent in ChatGPT, achieved by unifying the Deep Research and Operator models. They cover its unified architecture with shared state across tools, the reinforcement learning techniques used for training, and the critical safety measures required for an agent that can take real-world actions.
A new agent in ChatGPT represents a significant architectural evolution, created by merging the formerly separate Deep Research and Operator teams and models. The goal was to create a single, flexible agent capable of performing complex, multi-step tasks that can last up to an hour.
A Unified Agent Architecture with Shared State
The agent operates within a virtual computer environment, providing a unified experience where all tools share a common state and file system, much like a human using a personal computer. This architecture allows for seamless transitions between different tools to accomplish a task.
The primary tools include:
- Text-based Browser: Originating from Deep Research, this tool is optimized for efficiently searching, reading, and synthesizing information from long articles.
- Visual (GUI) Browser: Evolved from Operator, this tool provides full access to the graphical user interface of a web page, enabling the agent to click, type into forms, scroll, and interact with dynamic elements that a text browser cannot handle.
- Terminal Access: The agent can run code, analyze files, perform calculations, and create artifacts like spreadsheets or slides.
- API Integration: Through the terminal, the agent can call public or private APIs, accessing services like GitHub, Google Drive, and SharePoint after user authentication.
This combination is more powerful than its predecessors. For example, the agent can use the efficient text browser for initial research, switch to the visual browser to interact with a login portal or view images, download a file, and then process that file in the terminal.
Training with Reinforcement Learning
The agent is trained using reinforcement learning (RL) on a massive scale, involving thousands of virtual machines running concurrently. Instead of being explicitly programmed with tool-use patterns, the model is given a diverse set of difficult tasks and learns the optimal strategy for switching between tools through experimentation. It is rewarded for completing tasks efficiently and correctly.
Key aspects of the training process include:
- Data Efficiency: RL is very data-efficient, allowing the model to learn new, complex capabilities from a relatively small, highly curated dataset of trajectories, which is minuscule compared to pre-training data.
- Stability as a Challenge: A primary engineering challenge was maintaining the stability of the training environment, with thousands of VMs accessing the live internet simultaneously.
- Building on Past Research: This work stands on the shoulders of previous projects like “World of Bits.” The key differentiator now is the massive scale of compute and data available for both pre-training and RL, which has made the initial ambitions solvable.
Collaborative Human-Agent Interaction
The interaction model is designed to be collaborative and flexible, mirroring how a person might delegate a task to a colleague.
- Bidirectional Communication: Both the user and the agent can initiate communication. The agent can ask clarifying questions before or during a task, and the user can interrupt to provide corrections, ask for a status update, or redirect its path.
- User Oversight and Control: Users can observe the agent’s actions in a persistent virtual environment. This “over-the-shoulder” view allows the user to take over at any point to perform actions themselves, such as logging in or entering sensitive information like credit card details.
- Improved Conversational Ability: The model demonstrates strong multi-turn conversational skills, making it effective for iterative work on a single, evolving task.
Safety and Guardrails for Real-World Actions
Because the agent can take actions with real-world consequences (e.g., making purchases), safety is a core component of its design. This is a significant step up in risk from previous read-only models.
- Layered Mitigations: The team implemented numerous safety measures at every level, developed in collaboration with safety, governance, and legal teams.
- “Antivirus” Monitor: A persistent monitor model observes the agent’s behavior, looking for suspicious activity such as navigating to malicious websites. If detected, it halts the trajectory.
- Extensive Red-Teaming: The model underwent weeks of internal and external red-teaming to identify and mitigate potential misuse, with a specific focus on high-impact areas like biorisk.
- Permission-Seeking: For destructive or sensitive actions, the agent is trained to ask the user for explicit permission before proceeding.
Future Directions and Open Challenges
The current agent is considered the most basic version of what is possible with this architecture.
- Generalization: The immediate goal is to improve the agent’s performance across the vast distribution of tasks a human can perform on a computer.
- Personalization and Memory: Future iterations will focus on incorporating memory and personalization to make the agent more effective and tailored to individual users.
- Proactive Assistance: The vision extends to agents that can proactively perform tasks for the user without being explicitly asked.
- New Interaction Paradigms: The team is exploring new UI/UX models for agent interaction beyond the current chat-based interface.
- A Single, General Agent: The prevailing vision is to develop a single, “omniscient” base model that can perform any task, rather than creating specialized sub-agents. The reasoning is that skills learned for one domain (e.g., data analysis) are often transferable to others (e.g., financial planning for a shopping task).
- Persistent Difficulties: Some seemingly simple tasks, like date picking on web forms, remain mysteriously difficult for AI systems to perform reliably.