Synthesis screening evasion

Ordering synthetic DNA from a commercial provider is the only moment in the process at which a third party can look without knowing what it is for. That control works by comparing the requested sequence against lists of agents of concern. The risk is that AI-assisted design produces sequences that keep the function and stop resembling the reference.

It is demonstrated in the lab, and it has a name. Wittmann and eleven co-authors published in Science, on 2 October 2025, an evaluation of open-source AI-enhanced protein design software: they identified a vulnerability by which redesigned sequences were not reliably detected, and developed and deployed patches ^[1114]Strengthening nucleic acid biosecurity screening against generative protein design toolsWittmann, Bruce; Alexanian, Tessa; Bartling, Craig et al. · 2025 · paperView source ↗Accessed on 9 September 2026. In 2026 RAND tested autonomous agentsAI agentAn AI system that does more than answer: it takes a goal and acts on its own to reach it, step by step, using tools such as a browser, email or a terminal, without anyone approving each step.For exampleAsking an assistant to suggest flights is using a chatbot. Asking it to search, compare, buy the ticket and put it in your calendar, all by itself, is using an agent. operating biological tools: some redesigned sequences evaded screening, with low reliability —Gemini 3.1 Pro managed it in 3 of 30 attempts— ^[888]Testing Large Language Model Agents on the Use of Biological Tools for Nucleic Acid Synthesis Screening EvasionLee, Jeffrey; Worland, Alyssa; Rodriguez, Christopher et al. · 2026 · reportView source ↗Accessed on 9 September 2026.

The regulatory framework does not keep up. The OSTP one dates from April 2024 and operates as a funding condition, not as law ^[833]Framework for Nucleic Acid Synthesis ScreeningOffice of Science and Technology Policy · 2024 · official documentView source ↗archived copy onlyAccessed on 9 September 2026; the executive order of May 2025 ordered it replaced within 90 days ^[364]Improving the Safety and Security of Biological ResearchThe White House · 2025 · official documentView source ↗Accessed on 9 September 2026 and thirteen months past the deadline the official page still announces that it will be updated ^[101]Synthetic Nucleic Acid ScreeningAdministration for Strategic Preparedness and Response · 2026 · webView source ↗Accessed on 9 September 2026.

What this does not demonstrate. No documented evasion ended in manufactured material: the two known cases are evaluation exercises whose findings were patched. RAND’s finding 5 points in an uncomfortable direction for both camps: the providers’ filters made it impossible to test the most advanced closed models, so nobody —not even the external evaluators— knows what the real ceiling is on this task ^[888]Testing Large Language Model Agents on the Use of Biological Tools for Nucleic Acid Synthesis Screening EvasionLee, Jeffrey; Worland, Alyssa; Rodriguez, Christopher et al. · 2026 · reportView source ↗Accessed on 9 September 2026. And Anthropic announces that it will deprecate its own screening-evasion evaluation because it doubts that its results are a meaningful proxy for biological viability ^[82]System Card: Claude Fable 5.1 & Claude Mythos 5.1Anthropic · 2026 · system cardView source ↗Accessed on 9 September 2026.