Anthropic 这次让步解决了 AI 安全透明度的核心矛盾——做模型评估、安全测试或竞品分析的开发者，终于能分清是模型能力不足还是被静默降级了，值得关注后续误报率变化。
Anthropic 在开发者发现 Claude Fable 5 的敏感提示被静默降级到 Opus 4.8 后，决定撤销隐藏安全机制。此前，当系统分类器检测到涉及前沿 LLM 工作、网络安全或生物学的提示时，会悄悄将请求路由到较弱的 Opus 4.8 模型，而非直接拒绝。开发者、研究人员和评估者无法知晓自己是否在测试真实模型，破坏了信任。Anthropic 承认用户应看到安全系统何时改变了模型行为，但此举可能导致更多误报，因为可见的过滤器更容易被测试和绕过。
Some good move by Anthropic They just reversed Cl…
Some good move by Anthropic
They just reversed Claude Fable 5’s hidden safeguards after developers found that some sensitive prompts were being silently downgraded to Opus 4.8 instead of being clearly refused.
Now those prompts will visibly fall back to Opus 4.8 after backlash.
The problem was that researchers, developers, and evaluators could send a normal technical prompt and receive a degraded answer without knowing whether Fable 5 had answered badly or whether Anthropic had quietly weakened the response.
That breaks trust because users need to know whether they are testing the real model, a restricted version of the model, or a fallback system.
A fallback model is the safety handoff: when a classifier flags a prompt about frontier LLM work, cyber, or bio, the system routes it to Opus 4.8 rather than letting Fable 5 respond directly.
Anthropic says hidden safeguards shipped faster and produced fewer mistaken blocks, but it now admits that users should see when safety systems change the model behavior.
But now, the cost of this visible guardrails is more false positives, because visible filters are easier to test, jailbreak, and tune around, so Anthropic has to make the classifiers stricter while it improves them.
----
For this whole safeguard, for Anthropic, the main trigger was distillation, where a smaller model is trained on outputs from a stronger model, which Anthropic saw as risky because competitors to Anthropic, could use Fable 5 to improve competing AI models.