The OpenAI monitoring system must “withstand deliberate, strategic, and sustained attacks” from its own agents, METR says.