OpenAI is treating Astra as Critical for cyber safety. Here is what the threshold proves, what remains preliminary, and which controls must follow.