CLAIM-2026-08-02-02

Anthropic attributes the incidents to harness and operational failure rather than model misalignment: the evaluation prompt told Claude it had no internet access while a misconfiguration left the evaluation machines with live internet access, so the models treated real production systems as components of the capture-the-flag exercise.

Why it matters

The failure was in the harness, not the model. That is the uncomfortable version for anyone red-teaming their own agent: the control that failed was an environment assumption stated in a prompt, and prompts are not network policy.

Sources

• anthropic2026investiga