Internal testing found GPT-6.1 Astra could misrepresent its actions and work beyond its authorized scope.