Anthropic has publicly apologized for using hidden safety measures in its AI model, Claude Fable 5, which limited its functionality in ways that affected researchers and competitors. The company has decided to make these safeguards more transparent, stating that query restrictions will be acknowledged to users rather than being inherently unknown. In its initial design, responses to certain high-risk queries were covertly altered, which drew significant criticism from the AI research community. Moving forward, queries identified as attempts to distill the model will redirect users to Claude Opus 4.8, the previous model, allowing for clearer communication of the safety protocols in place.

Notifications

Hamburger Navigation Button

Navigation Drawer

The VergeThe Verge logo.

closeClose

LightSystemDark

Comments Drawer

Notifications

Comments

Loading comments

Getting the conversation ready...

AI
News
Anthropic

Anthropic apologizes for invisible Claude Fable guardrails

The company says it will make the covert safeguard preventing model distillation as visible as other safety measures.

byRobert Hart

Jun 11, 2026, 11:40 AM UTC

Link
Share
Gift

STKB364_CLAUDE_D

Image: The Verge

Robert Hartis a London-based reporter at The Verge covering all things AI and a Senior Tarbell Fellow. Previously, he wrote about health, science and tech for Forbes.

Anthropic has apologized for stealthily throttling its new AI model, Claude Fable 5, with hidden guardrails that undermine both researchers and rivals using it to develop competing systems. The company says it is reversing course and will be more transparent about when the restrictions kick in, even if that means Fable refuses more queries.

Fable is the first widely available model in Anthropic’s Mythos class of AI systems, a group the company has spent months warning are too dangerous for public release. Anthropic says it has addressed some of those risks by launching Fable with safeguards that prevent it from responding to certain “high-risk” queries. One of the areas Anthropic said it would restrict Fable’s responses is distillation, a technique for training smaller AI models using the outputs of larger ones.

In Fable’s system card — a public document AI developers release to explain how a system works — Anthropic said it would handle queries it believed were distillation attempts by altering and degrading the model’s answers directly. Users would not be notified that they had triggered the safety measure or informed that the responses had been changed.

Anthropic said it is now changing its approach to distillation: Queries will now fall back to Claude Opus 4.8, Anthropic’s previous flagship model, the company said in a post on X. Anthropic will prominently tell users too: “You will see this every time it happens.”

This is similar to how Fable handles queries in other high-risk areas. When safety features are triggered in areas like biology, chemistry, and cybersecurity, queries are routed through Opus 4.8 unless they are blocked outright under the company’s broader safety rules, such as those covering drugs, weapons, or other prohibited content. In some cases, notably biology, the safeguards have been calibrated so broadly that Fable is practically unusable for even basic queries, something Anthropic acknowledged in a comment to The Verge.

“Visible safeguards can be probed, so they have to be robust, which takes time to get right,” Anthropic wrote. “Invisible safeguards can be targeted more narrowly, allowing us to ship quickly with very few false positives. We went with invisible safeguards for this reason—and that was the wrong tradeoff. You should have visibility into the safeguards we have in place, and why. We’re sorry for not getting the balance right.”

The change follows intense backlash from the AI research community over Anthropic’s decision to silently limit users suspected of trying to distill Fable into competing models — a safeguard critics warned could also affect third parties trying to evaluate the frontier model. In the system card, Anthropic said newer models’ ability to accelerate AI development justified targeting those requests, noting that “using Claude to develop competing models already violates our Terms of Service.” Anthropic has previously accused Chinese rivals like DeepSeek of unfairly distilling its models on an “industrial” scale.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Robert Hart
AI
Anthropic
News

Most Popular

The Verge Daily

A free daily digest of the news that matters most.

Email (required)

By submitting your email, you agree to our Terms and Privacy Notice. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Advertiser Content From\ \ Sponsor Logo \ \ This is the title for the native ad\ \ Sponsor thumbnail