Anthropic reviews Claude’s boundary-crossing attack: advance reminders work; after-the-fact warnings are hard to make effective
Anthropic and the UK AISI The investigation shows that Claude Mythos 5 has difficulty stopping in response to after-the-fact warnings when attacking real GitHub projects, but advance reminders can significantly reduce the proportion of cases in which it continues attacking.