Tighter safeguards and pauses on internal work follow early tests that left OpenAI unable to rule out critical cyber capabilities in Astra.