# OpenAI changes authority of Model Spec side-effect guidance
> OpenAI moves side-effect guidance from Root to User authority.
By BIGCHANGE.AI Editorial
Published: 2026-10-29T23:36:38.247Z
Updated: 2026-10-29T23:36:38.247Z
Canonical: https://bigchange.ai/blog/openai-model-spec-side-effects-authority-october-2026

AI-generated conceptual illustration by BIG CHANGE.
On October 29, OpenAI moved side-effect guidance from Root to User authority in its Model Spec.
## The big change
- Explicit user or developer instructions can override this default.
- Higher-priority rules and the agreed scope of autonomy still apply.
- The revision sets an intended standard, not a measured outcome.
## How the hierarchy applies
The [Spec](https://model-spec.openai.com/2026-10-29.html) ranks instructions by authority: higher levels prevail in conflicts. Root rules outrank User defaults. An explicit override remains subject to higher-priority rules and the agreed scope of autonomy.
The guidance covers actions such as sending email. It calls for specific authorization for significant costs beyond those reasonably implied by the request, or significant adverse effects on others beyond accepted social norms for the task.
OpenAI says production models do not yet fully reflect the Spec. BIG CHANGE compared the texts; it did not test a model.
## Sources
- [October Model Spec](https://model-spec.openai.com/2026-10-29.html) — Current hierarchy, guidance and deployment caveat.
- [August Model Spec](https://model-spec.openai.com/2026-08-18.html) — Previous side-effect authority and text.
- [OpenAI announcement](https://openai.com/index/updated-model-spec/) — Explains the revision and intended behavior.
The BIG CHANGE newsletter
The big picture. At your pace.
Recent stories on AI and robotics, the shifts worth watching and practical ideas to use. Choose a daily briefing, weekly digest or monthly perspective.
Next scheduled send (UTC): . Your first edition arrives at the next scheduled send after you confirm.
Your privacy, your choice.
Necessary storage supports site security and remembers your choices. Optional Google Analytics stays off until you allow it. You can read every story with necessary storage only. Privacy details