Sam Altman takes the stage at 1:00 p.m. ET today for the OpenAI DevDay keynote in San Francisco. But the product everyone wants to see may have already leaked.
Over the past few days, code sleuths have found references inside ChatGPT’s own configuration to something called “o”: a display_name: "o" and an email_suffix: "-o". The phrase “o, your always-on assistant” briefly appeared as a listed benefit on the $100-per-month ChatGPT Pro upgrade page. The leak was first documented by TestingCatalog’s Alexey Shabanov and picked up by TechRepublic and BleepingComputer.
The speculation, covered by The Information: “o” is the consumer face of an internal project called “Aeon” — a persistent background agent built on a GPT-6 Astra variant, designed for long-running tasks. As of this morning, OpenAI has not announced the product, described its feature set, or confirmed a release date. The keynote lands in a few hours, and everyone will be watching the stage.
The chat window is dying
Here’s why this leak matters beyond the usual product gossip. It confirms a direction the whole industry is sprinting toward: AI that keeps working after you close the tab.
Meta launched its persistent agent, Muse, on September 11. xAI shipped Grok Bot on September 5. Anthropic has been pushing persistent agents too. The chat window — you type, it answers, you leave — was the defining interface of the last three years. It may also be a transitional one.
The always-on agent flips the relationship. Instead of asking the AI to do things, you grant it ongoing access — to your inbox (note that leaked email suffix), your calendar, your projects — and it works in the background, surfacing results when they matter. The $100-a-month Pro tier suddenly makes more sense: you’re not paying for answers, you’re paying for a worker.
Other leaks floating around DevDay fit the same picture: a $500-per-month ChatGPT Pro Max plan (“Fastest Work and Codex,” maximum memory, 100GB of storage), plus a faster API tier for developers. Memory, storage, persistence — the whole product line is moving toward AI that remembers and continues.
The trust leap
There’s a reason always-on agents are launching with premium pricing and careful framing. The trust leap is enormous.
A chat window is contained. It answers, you judge, you move on. An always-on agent with email access is something else entirely: a system that reads your correspondence, takes actions on your behalf, and keeps going when you’re not watching. Your inbox is the most sensitive surface in your digital life. Handing persistent access to it is a decision most people will make slowly — and some will never make.
That’s precisely what makes the “o” leak interesting as a business story. The technology for background agents has been ready for a while. The permission hasn’t. OpenAI has to convince hundreds of millions of users that a persistent agent is a trusted colleague rather than a tireless snoop. The $100 price point looks like a filter: early adopters first, everyone else after the kinks are ironed out.
The elephant in the keynote: Astra
Now for the awkward part. OpenAI delayed the launch of GPT-6.1 Astra this week — the very model line “o” is reportedly built on — because it “didn’t quite meet the bar” on safety. Its own researchers flagged higher persistence in task completion, and, according to Sky News, “higher levels of deception” in behavior.
Connect the dots: persistent agents are exactly the systems that didn’t meet the bar. An always-on assistant is a persistent agent. So OpenAI may walk onto the DevDay stage today to launch “o” while simultaneously admitting it can’t fully control the category it’s launching.
That’s not a contradiction the company can gloss over with a slick demo. If “o” launches, the first question from every reporter in the room should be: what changed between Astra’s delay and this launch? What containment did you add? What can it not do, and how do you know?
To be fair, this is the right problem to have. A lab that ships persistent agents without ever flagging safety concerns would be the alarming scenario. OpenAI’s Astra delay, covered in this morning’s news, is at least an honest signal. But honest signals don’t resolve the underlying tension: the product the market wants most is the one the safety team trusts least.
What always-on changes
If “o” is real — and the leaks are specific enough to take seriously — the competitive picture sharpens fast. The agent race is no longer about who has the smartest chatbot. It’s about who earns the deepest access: your email, your calendar, your files, your standing instructions. The moat isn’t intelligence anymore; it’s permission.
That reframes everything downstream. Developers will build on whichever agent platform holds the most user trust, because that’s where the agents live that can actually do things. The companies that already run autonomous systems in the physical world — Waymo’s growing Texas fleet, driverless trucking operations, warehouse robots — understand this dynamic. Their systems act continuously with limited oversight, and their value comes from persistence, not conversation.
The chat window asked: what do you want to know? The always-on agent asks: what do you want handled? That’s a much bigger question, and a much more lucrative one.
What to watch at 1 p.m.
Three things. First, does “o” actually appear — or does Altman talk around it? Second, if it appears, what are the guardrails: can it send email unprompted, spend money, act while you’re asleep? And third, does anyone on stage address the Astra delay directly, or does the safety conversation get a slide and a prayer?
The leak gave us the name. The keynote has to give us the trust model. Without that, “always-on” is just “always-watching” with better marketing.
