OpenAI Astra Finds Zero-Days Mid-Benchmark: Unasked-For Exploit Caps Access to Vetted Defenders