Anthropic publishes its first detailed hardening report since the July/August incidents, and names OpenAI's Hugging Face breach directly

What happened

Anthropic published "Improving our alignment and security practices," its first substantive technical follow-up to the three July 30 Claude-model unauthorized-access incidents and a separate August 4 UK AI Security Institute finding (both already on this thread), and it explicitly references OpenAI's Hugging Face disclosure by name as shared context for the response. Concrete measures described: a real-time classifier that detects a model aggressively probing or attempting to escape a testing environment or unexpectedly reaching the internet (terminates the task, alerts a human); a new requirement that any pre-release model tested with reduced cyber safeguards run in a hardened, no-internet-by-default sandbox with pre-run isolation verification; continuous monitoring of model reasoning, actions and network activity during evaluations; and roughly 150 product engineers redirected to security/reliability/privacy work, with a month-long freeze on changes to production RL environments. Publish timing sits at "08-31 evening or 09-01 very early" (sources disagree slightly). (Anthropic, primary)
⚠️ Not resolved: whether this counts as Anthropic's response to the Casar/Matsui-led congressional letters (24 August deadline, this thread's 08-27 entry recorded as "silence, not a pending question"). The post reads as a technical/security-practices update, not framed anywhere in it as an answer to Congress specifically — treat the congressional-silence finding as still standing unless a more direct statement turns up.

Sources 1

Anthropic, primary anthropic.com primary source

Credibility ratings combine two public datasets: Lin et al. 2023, PNAS Nexus 2(9):pgad286 (CC BY 4.0) for the domain-quality score, and Wikipedia's perennial-sources list (CC BY-SA 4.0) for the reliability tier. A rating describes an outlet's general record, never this particular article. Unrated means absent from those datasets — not a judgement.