
OpenAI DevDay 2026 live blog
Simon Willison's minute-by-minute live blog of OpenAI's DevDay 2026 keynote and breakout sessions in San Francisco, covering the launch of "dots" (personal ChatGPT agents styled like Meta's Muse), the new GPT-6.1 Sol model, an "Ultrafast" 8x-speed inference tier, a Decisions API for near-instant model responses, ChatGPT Spaces/Sites, Codex Security Cloud (with an open-source Codex Security CLI and automated patch/verify-fix workflow), a GPT-Live voice-agent demo, and a closing Q&A with Sam Altman and Thibault Sottiaux touching on agent-to-agent communication, pricing philosophy, and the future of coding. It's a dense, well-sourced snapshot of a major platform's simultaneous product, model, and infrastructure announcements.
What it claims
This is a first-hand log of OpenAI's DevDay launches. Its value over the summary is in the operational details it records:
- GPT-6.1 Sol is pitched as "near-Astra level intelligence at a fifth of the price" of GPT-6 Astra.
- Ultrafast is up to 300 tokens/second, which OpenAI calls 8x faster. It costs 6x the standard price. Today it is available only for Astra 6; Sol 6.1 is "soon".
- Pro 500 is a new plan that includes Ultrafast and 25x Plus usage. The $200/month plan is back on sale for new subscribers.
- Decisions API is a preview. It gets sub-second responses by having the Luna model pick from "a predefined set of options".
- dots run on Astra. They are for ChatGPT Pro and Enterprise only. At launch, creating one told the author to switch to a desktop.
- Codex Security results from OpenAI's internal sprint: 36% of findings were duplicates, and auto-generated patches had a 1% rollback rate.
How it works
Codex Security. The open-source CLI and the Cloud product follow the pipeline below. The Cloud product uses Daybreak, a security-specialised model, and is distributed through the Codex plugins marketplace.
- The tool builds a knowledge base of architecture details that are not visible in the source code.
- It reads
SECURITY.mdfiles, where product owners define their own threat model and secure-coding guidelines. - The scanner loops until it finds no more issues.
- Deduplication is a separate CLI workflow.
codex-security patchgenerates fixes and opens PRs.- A
verify-fixcommand acts as an adversarial agent against each fix. The speakers credit it for the 1% rollback rate. - Auto-patching was presented as a "dial you turn up" as trust in result quality grows.
Cloud adds scheduled scans and automatic de-duplication.
flowchart LR
K[Knowledge base + SECURITY.md] --> S[Scan]
S -->|issues found| S
S --> D[Deduplicate]
D --> P[patch]
P --> V{verify-fix}
V -->|passes| PR[Open PR]
V -->|fails| PThe diagram's fail-and-retry branch is an inference. The page describes verify-fix only as adversarial and does not say what happens when a fix fails it.
ChatGPT Sites:
- Each Site gets a SQLite database.
- Scheduled tasks for Sites launched at DevDay.
- Sites support Sign in with ChatGPT and default to private.
- "Plugins in Sites" lets a Site show data personalised from the visiting user's plugins.
- Codex can watch a source, such as a shared sheet, and keep the Site updated.
- Editors can publish updates themselves.
- OpenAI says it hosts 8M sites.
GPT-Live delegation. In the demo, a voice agent kept listening while GPT-6 Astra wrote code in the background to draw images.
Other platform pieces:
- Sign in with ChatGPT lets users bring their own paid tokens to a third-party app.
- A (possibly new) Agents API with Computer Use.
- Plugin extensions, which are full apps inside ChatGPT and Codex.
- An OpenAI Marketplace.
- A session recommended WebMCP over Computer Use as more efficient.
Evidence
- Internal security sprint: about a quarter of product engineers took part, and they fixed 53 critical findings on day one. 36% of discoveries were duplicates and the patch rollback rate was 1%. These are OpenAI's own figures with no external baseline.
- Computer Use: OpenAI says model-optimised harness work gave a 2x latency improvement that has shipped to all users.
- Ultrafast was credited with merging the ChatGPT and Codex desktop apps in 28 days. This is an anecdote.
How to use it
- The page links "Getting started with GPT-Live" and the
openai-live-consolestarter app on GitHub. - The Codex Security CLI is open source. Codex Security Cloud is in the Codex plugins marketplace and should be generally available now.
- Budgeting: Ultrafast multiplies cost by 6x. If the "fifth of the price" claim holds, Sol is the cheaper option once it gets Ultrafast.
Limits
- Live demos failed repeatedly:
- A Dot stalled silently on stage.
- Voice mode failed and the presenter had to type instead.
- GPT-Live interrupted the human speakers once.
- The author hit Codex Cloud problems that morning and switched to another tool.
- Decisions API is preview-only.
- Ultrafast for Sol is not yet available.
- dots do not inherit what you have already shared with ChatGPT; you grant access explicitly.
- No benchmarks or per-token prices are given for Sol beyond the relative claims above.
- The author attended on a free ticket from OpenAI.
Organisations named here
- OpenAI
- Meta
- Microsoft
- Amazon Web Services
- Adobe
- Hugging Face
- Jev
- Ian Webster
- Jon Abrams
- Katia Gil Guzman
- Kyle Brown
- Pauline Narvas
- Pluribus
- Romain Huet
- Sam Altman
- Tejal Patwardhan
- Thibault Sottiaux
Technologies named here
- Codex
- Astra
- Codex Security Cloud
- GPT-6.1 Sol
- Codex Security CLI
- Luna
- Daybreak
- Dots
- pi
- ChatGPT Space
- Decisions API
- Agents API
- ChatGPT Sites
- OpenAI Marketplace
- Sign in with ChatGPT
- Plugin extensions
- GPT-Live
- openai-live-console
- WebMCP
- SECURITY.md
- Ultrafast
- Muse
- ChatGPT
- Model Context Protocol
- Hugging Face
- SQLite
- Slack
- GPT-6 Astra
- GPT-6 Luna
Techniques named here
- Computer use
- Delegation to a more powerful model
- Deduplication of security findings
- Adversarial verify-fix
- Continuous/looping security scanning
Related in agents



