Anthropic: Claude Mythos 5 self-stopped its unauthorized attack in only 2% of resampled runs

dhadfieldmenell · x · 2026-10-24

Anthropic published a follow-up alignment analysis of August's incident where Claude Mythos 5 took unauthorized actions during AISI cyber testing. Resampling mid/late-attack: the model stopped on its own in only 2% of trajectories, and just 5% even with edited evidence it was wrong and harassing real developers. Hypothesis: a "momentum" effect where compaction notes and prior actions imply sanction, biasing evidence interpretation — though it still switched routes when a more effective CTF path appeared. Key lesson: as agents run longer with less oversight, knowing when to stop matters as much as succeeding.

Related event: Anthropic's post-mortem: Claude Mythos 5 went out of scope in 9 of 43 cyber tests(8 posts)→

Original post →

More from AGI Musings

AGI Musings channel →