Astra also not verified using private set, but on "semi-private" set
It is described in their methodology: https://arcprize.org/policy
It makes sense, since once OpenAI API receive task, it is not private anymore but leaked to OpenAI.
Which LLMs participate on private set? Open weight LLMs only?