GPTMap

OpenAI Ecosystem Week 43 Briefing (2026-09-01): mTLS GA, Sora 2 Countdown, Shutdown Calendar

OpenAI week 43 briefing: mTLS and X.509 workload identity federation are GA; Sora 2 and the Videos API enter the 9-24 shutdown countdown; the Prompt Caching dashboard ships; plus the official shutdown calendar through 2027-02.

TL;DR
OpenAI week 43 (2026-09-01): mTLS and X.509 workload identity went GA on 8-29; the Prompt Caching dashboard shipped 8-20 (hit rate, reads per write, token breakdown); Ultrafast mode (GPT-5.6 Sol tier, up to 14x Standard, limited preview) is in flight. Sora 2, sora-2-pro, and the Videos API shut down 2026-09-24 -- 23 days out, no replacement listed. Full shutdown calendar to 2027-02 inside.
The OpenAI ecosystem week 43 briefing is a sourced summary of key OpenAI ecosystem events as of 2026-09-01, focusing on API infrastructure (mTLS, the Prompt Caching dashboard, Ultrafast mode), the Sora 2 shutdown countdown, and a fall/winter shutdown calendar compiled from the official deprecations page, with official references for every entry.

The OpenAI ecosystem week 43 briefing covers official announcements as of 2026-09-01. No new models this week -- the main line is API infrastructure: security (mTLS), cost observability (the Prompt Caching dashboard), and speed (Ultrafast mode) all landed within days of each other. Meanwhile the Sora 2 shutdown countdown entered its final 23 days, and the official deprecations page contains a full fall/winter shutdown calendar that every team should walk through line by line. The OpenAI ecosystem briefing is a sourced summary of key ecosystem events, with official references for every entry.

1. The Main Line: Three Infrastructure Releases

1.1 mTLS and X.509 Workload Identity Are GA (8-29)

The official changelog entry for 8-29: Mutual TLS (mTLS) and X.509 workload identity federation are now generally available for the OpenAI API. The configuration entry point is the Platform console -- certificates and X.509 identity providers can be configured directly there, with access controlled by your organization's roles and permissions.

For most individual developers this entry is easy to skip. But if you are building enterprise-grade integrations -- especially under zero-trust networking, service identity auditing, or compliance requirements -- OpenAI now officially offers a certificate-grade identity path for API callers: instead of a bare API key, your calls to the OpenAI API can be authenticated by a certificate that is rotatable, revocable, and bound to a workload identity.

1.2 The Prompt Caching Dashboard Ships (8-20)

Prompt caching itself has existed for a while (repeated prefixes hitting the cache save money); what shipped this time is observability. The official Prompt Caching dashboard shows your cache hit rate over time, cache reads per write, and the breakdown of cache-read, cache-write, and uncached tokens. Metrics are filterable by model and service tier.

Practical advice: if you run long system prompts with multi-turn conversations or batch evaluation workloads, check the hit rate first. A common cause of a low hit rate is an unstable prefix (timestamps or random values placed early in the prompt). The token breakdown makes this class of problem easy to locate.

1.3 Ultrafast Mode Still in Flight (8-13 Recap)

Ultrafast mode, announced on 8-13, is a new API service tier exclusive to GPT-5.6 Sol, officially described as up to 14x faster than Standard processing. It is currently in limited preview for select customers, with a sign-up channel for updates. Of this week's three infrastructure items it is the only one not yet broadly available -- noted here for status, pending a rollout announcement.

2. Sora 2 Enters the Shutdown Countdown (9-24, 23 Days Out)

The deprecations page entry announced on 2026-03-24 lists the full set of shutdown targets and the date: the Videos API, sora-2, sora-2-pro, sora-2-2025-10-06, sora-2-2025-12-08, and sora-2-pro-2025-10-06, all shutting down on 2026-09-24.

Two details deserve special attention:

  1. No official replacement is suggested. In the deprecations table, the "Recommended replacement" column for this batch is "---" -- unlike the transcription models (explicitly pointed at gpt-live-transcribe / gpt-transcribe) or the legacy GPT snapshots (explicitly pointed at the GPT-5.6 family). For the video generation direction, OpenAI currently has no official answer.
  2. The entire API line is shutting down, not just model snapshots -- the Videos API itself is on the list. Production code still calling it cannot be fixed by swapping a model name; it needs a full migration assessment.

There are 23 days until 9-24. Teams still using the video generation API should schedule "migrate or decommission" this week -- do not count on a delay; no extension has been announced so far.

3. The Fall/Winter Shutdown Calendar (2026-09 to 2027-02)

Sorting every unexpired entry on the official deprecations page by shutdown date produces the calendar below. Each row maps directly to an announcement batch on that page:

Shutdown dateShutting downOfficial replacement
2026-09-24Videos API; sora-2 / sora-2-pro and snapshotsNone (column empty)
2026-09-28gpt-3.5-turbo-instruct, babbage-002, davinci-002, gpt-3.5-turbo-1106gpt-5.6-terra
2026-10-23Legacy GPT snapshot batch: gpt-3.5-turbo-0125, gpt-4-0613, gpt-4-1106-preview, gpt-4-turbo, gpt-4.1-nano, gpt-4o-2024-05-13, gpt-image-1, o1, o1-pro, o3-mini, o4-mini, plus fine-tuned variantsMapped by tier to GPT-5.6 (sol / terra / luna), gpt-image-2
2026-10-31Existing evals on the Evals platform become read-onlyMigration path: Promptfoo (official guide)
2026-11-30Evals dashboard and API; v1/prompts and reusable prompt objects; Agent BuilderEvals → Promptfoo; prompt content moves into application code; Agent Builder → Agents SDK or ChatGPT Workspace Agents
2026-12-01gpt-image-1-mini, gpt-image-1.5, chatgpt-image-latestgpt-image-2
2026-12-11GPT-5 and o3 snapshots: gpt-5-2025-08-07, gpt-5-mini, gpt-5-nano, gpt-5-pro, o3-2025-04-16, o3-proMatching GPT-5.6 tiers; pro snapshots point to gpt-5.6-sol (reasoning.mode: pro)
2027-01-06Self-serve fine-tuning: active existing customers stop creating new fine-tuning jobsInference remains available until the base model is deprecated
2027-01-20Legacy audio / realtime families: gpt-realtime, gpt-audio, gpt-4o-audio, gpt-4o-realtime, gpt-realtime-mini, gpt-audio-mini, gpt-4o-mini-realtime, gpt-4o-mini-audio and moregpt-realtime-2.1 (mini), gpt-audio-1.5
2027-02-26whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, gpt-4o-transcribe-diarizegpt-live-transcribe or gpt-transcribe

Two "shutdown-like" dates also belong on your team calendar: 2026-11-12, when OpenAI's termination of model supply to Cursor takes effect for individual users (enterprise transition until 2026-12-31), and 2026-11-21, the official floor date of the GPT-5.6 Sol promotional price of $4/$20 (after that date, pricing is whatever the official pricing page says).

4. Early-August Backfill: Four Easy-to-Miss Updates

  • 8-7 · Daybreak tiers: for approved defenders, Daybreak now offers two tiers. Daybreak Blue covers most defensive security work, using general-purpose models such as GPT-5.6 Sol for vulnerability discovery, secure code review, detection engineering, incident response, malware analysis, and patch validation. Daybreak Red requires separate approval and opens purpose-trained models such as GPT-5.6 Cyber for authorized vulnerability reproduction, exploit validation, penetration testing, and red teaming.
  • 8-6 · chat-latest snapshot update: chat-latest points to the latest model available in ChatGPT for Plus and Pro users, and the underlying snapshot is updated regularly; OpenAI continues to recommend GPT-5.6 Sol for production API usage.
  • 8-5 · Fast mode long context: all three GPT-5.6 tiers can now run long-context prompts exceeding 272K tokens in Fast mode, up to 2.5x faster than the Standard tier.
  • 8-4 · API-key dimension in usage dashboards: the Usage and Costs dashboards support filtering and grouping by API key, and the Usage API and Costs API support the same dimension for programmatic reporting and attribution.

5. This Week's Action List

  1. Video API users: audit your codebase for Videos API / sora-2 calls and migrate or decommission before 9-24 (no official replacement -- assess your own path).
  2. Teams running long prompts: open the Prompt Caching dashboard, check hit rate and token breakdown, and fix unstable prefixes first.
  3. Enterprise integration teams: evaluate whether mTLS / X.509 belongs in your next security review -- as of 8-29 this is an officially supported capability.
  4. Everyone: copy the shutdown calendar in section 3 into your team calendar, especially the 10-23 and 11-30 batch dates.

6. Next Steps

Key points

  • mTLS and X.509 workload identity federation went GA on 8-29: certificates and X.509 identity providers are configured directly in the Platform console, with access controlled by your organization's roles and permissions
  • Sora 2 / sora-2-pro / the Videos API shut down on 2026-09-24 (announced 2026-03-24) -- 23 days from today; the recommended-replacement column is empty
  • The Prompt Caching dashboard shipped on 8-20: cache hit rate over time, cache reads per write, and the cache-read / cache-write / uncached token breakdown, filterable by model and service tier
  • Ultrafast mode (announced 8-13): a GPT-5.6 Sol-only API service tier up to 14x faster than Standard, limited preview with sign-up
  • A dense fall/winter shutdown season: 10-23 legacy GPT snapshot mass shutdown, 11-30 triple shutdown (Evals / v1/prompts / Agent Builder), 12-11 GPT-5 and o3 snapshot shutdown
  • Early-August additions: Daybreak Blue / Red tiers (8-7), chat-latest snapshot update (8-6), Fast mode long-context beyond 272K tokens (8-5), API-key dimension in usage dashboards (8-4)

Frequently asked questions

Per the official changelog entry (8-29): Mutual TLS (mTLS) and X.509 workload identity federation are now generally available for the OpenAI API. Certificates and X.509 identity providers are configured directly in the Platform console, with access controlled by your organization's roles and permissions. For teams with zero-trust or enterprise compliance requirements, this is the official path to certificate-grade caller identity for API access.

Official references

Related articles

Subscribe to GPTMap Weekly

One email every Monday: curated OpenAI updates, deep dives, and best practices. No ads, unsubscribe anytime.

GPTMap EditorialPublished 2026-09-01 7 min read
Test environment (EEAT)
Last tested: 2026-09-01
Model used: gpt-5.6