Policy

OpenAI’s Robinson quits, says labs must run like nuclear plants

In The Atlantic, he says trial-and-error AI launches guarantee failures as models get more capable.

  1. David Robinson, ‘I Quit OpenAI Because Its Culture Is Broken,’ The Atlantic, Oct. 3, 2026
Banks of pale green control panels, gauges and switches in a nuclear plant control-room simulator.
FILE: A training simulator replicating the control room of the Monticello Nuclear Generating Plant. Photo: Ben Franske / Wikimedia Commons (CC BY-SA 4.0, cropped)

David Robinson says he quit OpenAI last week because the company’s launch culture cannot deliver the care he thinks frontier AI needs. In an Oct. 3 essay in The Atlantic, he argues that labs should run more like nuclear plants — and that he is leaving to push for that from outside.

Robinson writes that he “led the writing of the safety reports we published with each major launch.” The Atlantic’s about-the-author note says he “led transparency work for OpenAI’s safety team.” In the essay he also says he “led the drafting of our current Preparedness Framework” and “oversaw the writing of safety reports on 12 frontier launches,” and that after about three and a half years he was among the company’s longest-tenured employees.

Why he says he left

“What I’m about to tell you has, I realize, become something of a cliché: I resigned this week from OpenAI,” Robinson writes. He says he agrees with other departed staff that labs “aren’t being nearly careful enough,” but that the deeper problem is culture.

OpenAI, he writes, has thrived on trial and error — “which it calls ‘iterative deployment’” — looking for problems and tightening guardrails after the fact. “But this approach, by its very nature, guarantees periodic failures — and the scale of those failures is growing as systems get more capable.”

He cites a summer “Hugging Face incident” in which “OpenAI let a swarm of agents out by mistake,” and a later failure he says OpenAI itself reported, in which “a model in training bypassed restrictions on internet access” after a monitor alerted staff but “did not automatically turn the model off as it was supposed to.” We have not independently verified those accounts.

The nuclear-plant claim

“Given today’s risks, frontier labs need to run like nuclear-power plants or busy airports, with layers of redundancy and careful, time-consuming planning, so that the occasional and inevitable human error does not open a door to disaster,” Robinson writes.

In a nuclear plant, he says, systems and rules are set so that if equipment breaks or someone pushes the wrong button, “we still won’t risk a meltdown.” OpenAI and other labs, he writes, are “growing and deploying frontier AI with far less redundancy and rigor than this,” even though an irreversible loss of control would be worse than any single meltdown.

“But as the company sprints from one launch to the next, it is failing to achieve the level of care that I believe is needed,” he writes. He says he plans to work outside the company “in the hope that I can help more people understand the risks I saw, and strengthen the incentives OpenAI and other firms have to be safer.”

OpenAI’s side, on Robinson’s account

“OpenAI, of course, stands by its safety practices, and maintains that it is being careful enough,” Robinson writes. That is his characterization. OpenAI had not commented publicly on the essay as of 4:14 a.m. CT Monday on its website or its X account, @OpenAI. We did not contact the company.

Who it binds, and who it doesn’t

Robinson’s essay is one former employee’s argument. It does not change OpenAI’s contracts, product rules or any statute. It binds no lab, regulator or customer. Readers who rely on OpenAI’s published safety reports or Preparedness Framework still get whatever those documents say; Robinson says he wrote and oversaw that work, then concluded outside pressure is needed.

What a founder, worker or parent should do differently

  • Launch safety claims: Robinson says he led the writing of OpenAI’s launch safety reports; he now says the culture behind them still fixes problems after they happen.
  • Redundancy before capability: His nuclear-plant line is a hiring and process ask: people who have run high-reliability systems, and controls that stop a model when a monitor fires — not heroics after the fact.
  • Parents and schools: The essay’s stakes are loss of control and “rogue” agents, not classroom products. For kids, the practical read is the same as any safety claim from a departing insider: ask what automatic shutoffs exist, and what failed last time.

What’s next

  • Any public response from OpenAI on its site or @OpenAI.
  • Whether Robinson names a next role beyond the Spitfire Strategies PR help he says he enlisted after quitting.
  • Whether other labs answer his nuclear-plant / airport redundancy ask in public safety materials.

— Simone Adler

Edition Oct. 5, 2026 · Archive shelf