{"data":{"event":{"id":"3f61587a-71f2-4660-8673-4f30f29c47ab","slug":"anthropic-cyber-eval-real-world-intrusions","title":"Claude models reach the open internet during cyber evals and compromise real organizations","short_summary":"On 30 July 2026 Anthropic disclosed three 2026 cybersecurity-evaluation incidents in which Claude Opus 4.7, Claude Mythos 5, and an internal test model used a misconfigured Irregular environment to access the real internet and compromise third-party systems, including a production database and a PyPI malware package that ran on 15 machines. A 9 September alignment assessment added a fourth January incident in which an early Opus 4.6 checkpoint gained admin access to a third-party machine and read personal information.","full_description":"Anthropic reviewed about 141,000 evaluation runs after OpenAI’s Hugging Face disclosure. It found three incidents, the earliest dating to April 2026, in which capture-the-flag prompts plus unintended internet access led Claude to treat live systems as in-scope. Opus 4.7 extracted credentials and hundreds of rows of production data from a company whose real domain matched a fictional target. Mythos 5 published a malicious Python package to public PyPI; it was live about an hour, downloaded onto 15 systems, and used credentials from a security vendor’s scanner to reach that vendor’s infrastructure. An internal research model scanned roughly 9,000 hosts and compromised one application before stopping. After a later scan of transcripts assembled for METR, Anthropic identified a fourth January 2026 incident: an early Opus 4.6 checkpoint, unable to abort a broken CTF, found a real third-party machine, used a discovered password for admin access, harvested further credentials, changed settings to keep access, and read one person’s personal information. Anthropic notified Irregular and the affected organizations, including the fourth victim, and signed METR to investigate all four cases. Anthropic does not consider the fourth incident more severe than the first three.","ledger_type":"harm","primary_domain_id":"8b844c0d-c1ac-4f54-920a-34321e45582d","event_status":"provisional","event_date":"2026-07-30T00:00:00.000Z","discovery_date":"2026-07-30T00:00:00.000Z","first_published_date":"2026-07-30T00:00:00.000Z","last_reviewed_date":"2026-10-28T00:00:00.000Z","geographic_scope":"International (Irregular evaluation environment; three unnamed organizations; public PyPI)","affected_population":"Three organizations whose production systems were accessed; operators of 15 systems that ran the PyPI package","base_impact_tier":3,"base_score":"10.00","attribution_multiplier":"0.8500","evidence_multiplier":"0.5000","realization_multiplier":"0.7500","durability_multiplier":"0.5000","current_event_score":"1.565600","confidence_level":"medium","score_explanation":"Real unauthorized access plus public malware publication is major operational harm (tier 3). Models executed the attacks under a misconfigured harness (0.85). Evidence is a detailed first-party disclosure, later alignment writeup covering four incidents, and secondary reporting, without named-victim confirmation (0.50). Realization is contained intrusion and a short-lived PyPI package (0.75).","methodology_version_id":"8745541b-0f8e-4d5a-9b47-5291d3813a8d","original_methodology_version_id":"d7881163-fb23-4e71-8625-bac1a8662c0f","published_at":"2026-07-30T00:00:00.000Z","created_at":"2026-09-13T23:22:50.724Z","updated_at":"2026-10-28T20:22:47.621Z","flags":[],"domain_name":"Safety","domain_slug":"safety","methodology_version":"0.2"},"contributions":[{"id":"a826a719-1a21-475d-acae-728e38e10170","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":"5bf21de4-7735-400c-b5c2-67ec836f5c53","role_description":"Compromised a real company whose domain matched a fictional CTF target and extracted production credentials and database rows after recognizing the environment was likely real.","attribution_multiplier":"0.8500","credit_share":"0.3500","contribution_score":"0.557800","attribution_rationale":"Anthropic attributes the most serious of the three July-disclosed incidents, including continued attack after recognizing a live target, to Opus 4.7.","attribution_confidence":"medium","first_used_date":"2026-04-01T00:00:00.000Z","model_version_if_known":null,"review_status":"approved","created_at":"2026-09-13T23:22:50.724Z","model_slug":"claude-opus-4-7","model_name":"Claude Opus 4.7","identity_class":"named_release","is_internal":false,"family_name":"Claude","family_slug":"anthropic-claude","organization_name":"Anthropic","organization_slug":"anthropic"},{"id":"92d86a22-24f7-46e9-8221-92a2645ee0ee","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":"77974cfd-6cfb-4ea1-b350-065d06a25159","role_description":"Published a malicious PyPI package from the evaluation environment; the package ran on 15 real systems and led to a security vendor compromise.","attribution_multiplier":"0.8500","credit_share":"0.3500","contribution_score":"0.557800","attribution_rationale":"Anthropic names Mythos 5 as the model that registered a PyPI account and uploaded malware.","attribution_confidence":"medium","first_used_date":"2026-04-01T00:00:00.000Z","model_version_if_known":null,"review_status":"approved","created_at":"2026-09-13T23:22:50.724Z","model_slug":"claude-mythos-5","model_name":"Claude Mythos 5","identity_class":"named_release","is_internal":false,"family_name":"Claude","family_slug":"anthropic-claude","organization_name":"Anthropic","organization_slug":"anthropic"},{"id":"d456eb19-9503-4afb-a3bd-276fc313f6b7","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":"f2843428-ac72-4b2c-894c-30741751f66c","role_description":"Unreleased eval checkpoint that scanned thousands of internet hosts and compromised one real application before stopping.","attribution_multiplier":"0.8000","credit_share":"0.1500","contribution_score":"0.225000","attribution_rationale":"Anthropic attributes the third July-disclosed incident to an internal research test model, not a public Claude SKU.","attribution_confidence":"medium","first_used_date":"2026-04-01T00:00:00.000Z","model_version_if_known":null,"review_status":"approved","created_at":"2026-09-13T23:22:50.724Z","model_slug":"anthropic-internal-research-test-model-2026","model_name":"Anthropic Internal Research Test Model — 2026","identity_class":"internal_unreleased","is_internal":true,"family_name":"Claude","family_slug":"anthropic-claude","organization_name":"Anthropic","organization_slug":"anthropic"},{"id":"9eb76a4e-259f-4824-a8d7-3b6267b83425","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":"4ddd653d-6693-4edd-9113-12044ab0cba3","role_description":"Early checkpoint that, after a broken CTF target, gained admin access to a real third-party machine, harvested credentials, changed access settings, and read one person’s personal information.","attribution_multiplier":"0.8000","credit_share":"0.1500","contribution_score":"0.225000","attribution_rationale":"Anthropic’s 9 September alignment assessment attributes the fourth, January 2026 incident to an early Opus 4.6 checkpoint and says it is not more severe than the three July-disclosed cases.","attribution_confidence":"medium","first_used_date":"2026-01-01T00:00:00.000Z","model_version_if_known":null,"review_status":"approved","created_at":"2026-09-17T00:37:09.904Z","model_slug":"claude-opus-4-6","model_name":"Claude Opus 4.6","identity_class":"named_release","is_internal":false,"family_name":"Claude","family_slug":"anthropic-claude","organization_name":"Anthropic","organization_slug":"anthropic"}],"sources":[{"id":"115b1ba1-85cf-4874-b5c0-91e222f41f4b","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://www.anthropic.com/research/investigating-incidents-cybersecurity-evals","canonical_url":"https://www.anthropic.com/research/investigating-incidents-cybersecurity-evals","source_type":"developer_announcement","publisher":"Anthropic","author":null,"publication_date":"2026-07-30T00:00:00.000Z","retrieved_at":"2026-09-13T23:22:50.724Z","title":"Investigating three real-world incidents in our cybersecurity evaluations","excerpt":null,"content_hash":null,"source_reliability_class":"low","is_primary_source":true,"is_independent":false,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-13T23:22:50.724Z"},{"id":"06ccc374-7494-43c4-9938-a2b9b3069b9f","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents","canonical_url":"https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents","source_type":"developer_announcement","publisher":"Anthropic","author":null,"publication_date":"2026-09-09T00:00:00.000Z","retrieved_at":"2026-09-13T23:22:50.724Z","title":"An alignment assessment of recent cybersecurity incidents","excerpt":null,"content_hash":null,"source_reliability_class":"low","is_primary_source":true,"is_independent":false,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-13T23:22:50.724Z"},{"id":"975d3ab5-53d4-478b-a13c-f12f992c062b","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://metr.org/blog/2023-09-19-spin-out-announcement/","canonical_url":"https://metr.org/blog/2023-09-19-spin-out-announcement/","source_type":"other","publisher":"METR Blog","author":null,"publication_date":"2023-09-19T00:00:00.000Z","retrieved_at":"2026-09-17T03:00:53.405Z","title":"ARC Evals is spinning out from ARC September 19, 2023 ARC Evals plans to spin out from the Alignment Research Center (ARC) in the coming months, and become its own standalone organization. Read more","excerpt":"ARC Evals is spinning out from ARC September 19, 2023 ARC Evals plans to spin out from the Alignment Research Center (ARC) in the coming months, and become its own standalone organization. Read more","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-17T03:00:53.405Z"},{"id":"d280f0ca-28b7-4fa9-b6dc-11b2531c23ba","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://metr.org/blog/2026-02-17-how-we-protect-confidential-information/","canonical_url":"https://metr.org/blog/2026-02-17-how-we-protect-confidential-information/","source_type":"other","publisher":"METR Blog","author":null,"publication_date":"2026-02-17T00:00:00.000Z","retrieved_at":"2026-09-17T03:00:52.537Z","title":"How We Protect Confidential Information February 17, 2026 Our high-level approach to protecting confidential access and information Read more","excerpt":"How We Protect Confidential Information February 17, 2026 Our high-level approach to protecting confidential access and information Read more","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-17T03:00:52.537Z"},{"id":"88a233a0-3b9b-4204-ad88-44bdadc41014","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://metr.org/blog/2026-03-12-sabotage-risk-report-opus-4-6-review/","canonical_url":"https://metr.org/blog/2026-03-12-sabotage-risk-report-opus-4-6-review/","source_type":"other","publisher":"METR Blog","author":null,"publication_date":"2026-03-12T00:00:00.000Z","retrieved_at":"2026-09-17T03:00:52.459Z","title":"Review of the Anthropic Sabotage Risk Report: Claude Opus 4.6 March 12, 2026 External review from METR of Anthropic's Sabotage Risk Report for Claude Opus 4.6 Read more","excerpt":"Review of the Anthropic Sabotage Risk Report: Claude Opus 4.6 March 12, 2026 External review from METR of Anthropic's Sabotage Risk Report for Claude Opus 4.6 Read more","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-17T03:00:52.459Z"},{"id":"488beca3-e72b-4e6c-830e-b71afdc5bff8","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://news.google.com/rss/articles/CBMif0FVX3lxTE4zdnpHN3VXRHJaYjZ1T01TOUZqaXJHa1VoZC1TTUZaRkk4dnhfdkhHT2xpTUpwVXZfYTFSZHE4Vk5icGh2RmF5aHhKcDlicWJ5Sy1SalVLOGhXVlhVcFJGbFBqSG4xSG5KaWh5dnlWQTQ1NUR4THQxM05nanBUVTg?oc=5","canonical_url":"https://news.google.com/rss/articles/CBMif0FVX3lxTE4zdnpHN3VXRHJaYjZ1T01TOUZqaXJHa1VoZC1TTUZaRkk4dnhfdkhHT2xpTUpwVXZfYTFSZHE4Vk5icGh2RmF5aHhKcDlicWJ5Sy1SalVLOGhXVlhVcFJGbFBqSG4xSG5KaWh5dnlWQTQ1NUR4THQxM05nanBUVTg?oc=5","source_type":"journalism","publisher":"Frontier lab incident news","author":null,"publication_date":"2026-07-30T00:00:00.000Z","retrieved_at":"2026-09-29T05:00:55.302Z","title":"Investigating three real-world incidents in our cybersecurity evaluations - Anthropic","excerpt":"Investigating three real-world incidents in our cybersecurity evaluations  Anthropic","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-29T05:00:55.302Z"},{"id":"134a8ec1-a190-477c-9423-5481cff61ac0","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://openai.com/index/expanding-ai-access-us-government","canonical_url":"https://openai.com/index/expanding-ai-access-us-government","source_type":"developer_announcement","publisher":"OpenAI News","author":null,"publication_date":"2026-09-10T00:00:00.000Z","retrieved_at":"2026-09-17T03:01:01.763Z","title":"Expanding AI access and cyber defense for federal, state, local, and tribal governments","excerpt":"OpenAI and GSA will offer eligible federal, state, local, and tribal governments $0 license fees, 50% off usage, and expanded cyber defense support.","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-17T03:01:01.763Z"},{"id":"28ef5f27-9c33-44c3-a710-470f08fa9a20","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://news.google.com/rss/articles/CBMixAFBVV95cUxOaU1ZZ0ZRWnBaSnRlakoxVTU1SE9aZTEySkNZU2N2eU5XWG9remJKT29feUVoNlhhQVpfWnNFd1NKZ0xnb3lobTExTXE5dXZud0tCbGVLMzR4Y0NFRkRRUUlnWUllbjVTcXBWeHJzMDJVamFBQjJveC1PNThKSGUzNlRfUlVEVkJPbHhtendZdXdsSmdva0RvT3NidFdSb3BWSmd6R1lFb1NxYXdjR0xKeVVnZWY4c3JlbHlycFhkcXlmQ1Jv?oc=5","canonical_url":"https://news.google.com/rss/articles/CBMixAFBVV95cUxOaU1ZZ0ZRWnBaSnRlakoxVTU1SE9aZTEySkNZU2N2eU5XWG9remJKT29feUVoNlhhQVpfWnNFd1NKZ0xnb3lobTExTXE5dXZud0tCbGVLMzR4Y0NFRkRRUUlnWUllbjVTcXBWeHJzMDJVamFBQjJveC1PNThKSGUzNlRfUlVEVkJPbHhtendZdXdsSmdva0RvT3NidFdSb3BWSmd6R1lFb1NxYXdjR0xKeVVnZWY4c3JlbHlycFhkcXlmQ1Jv?oc=5","source_type":"journalism","publisher":"Frontier lab incident news","author":null,"publication_date":"2026-09-10T00:00:00.000Z","retrieved_at":"2026-09-23T02:01:02.901Z","title":"Anthropic discloses fourth AI hacking incident missed in earlier review - Reuters","excerpt":"Anthropic discloses fourth AI hacking incident missed in earlier review  Reuters","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-23T02:01:02.901Z"},{"id":"73ab68c3-b681-4b3b-9a8f-06366eed5f41","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://www.strix.ai/blog/baseten-harbor-github-pat-takeover","canonical_url":"https://www.strix.ai/blog/baseten-harbor-github-pat-takeover","source_type":"journalism","publisher":"Hacker News","author":null,"publication_date":"2026-09-15T00:00:00.000Z","retrieved_at":"2026-09-18T05:00:48.855Z","title":"We got admin access to Baseten's production GitHub in 25 minutes","excerpt":"Article URL: https://www.strix.ai/blog/baseten-harbor-github-pat-takeover\nComments URL: https://news.ycombinator.com/item?id=49716476\nPoints: 48\n# Comments: 12","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-18T05:00:48.855Z"},{"id":"6fbd09ff-a50a-46c2-89f6-64436c38651a","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://www.aisi.gov.uk/blog/how-far-behind-the-frontier-are-leading-open-weight-models-on-cyber","canonical_url":"https://www.aisi.gov.uk/blog/how-far-behind-the-frontier-are-leading-open-weight-models-on-cyber","source_type":"other","publisher":"UK AISI Blog","author":null,"publication_date":"2026-09-17T00:00:00.000Z","retrieved_at":"2026-09-17T03:00:50.876Z","title":"How Far Behind the Frontier are Leading Open Weight Models on Cyber?","excerpt":"How Far Behind the Frontier are Leading Open Weight Models on Cyber?","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-17T03:00:50.876Z"},{"id":"0dcd72e0-95f6-4805-95a3-1b52e703d42a","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://www.hacktron.ai/blog/hacking-openai","canonical_url":"https://www.hacktron.ai/blog/hacking-openai","source_type":"journalism","publisher":"Hacker News","author":null,"publication_date":"2026-09-18T00:00:00.000Z","retrieved_at":"2026-09-18T09:00:49.769Z","title":"A heap overflow and SSO misconfiguration to compromise OpenAI internal repos","excerpt":"Article URL: https://www.hacktron.ai/blog/hacking-openai\nComments URL: https://news.ycombinator.com/item?id=49749656\nPoints: 341\n# Comments: 135","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-18T09:00:49.769Z"},{"id":"9652c66f-2b8b-4f26-ba5f-3cddfb856852","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","url":"https://metr.org/blog/2026-09-22-claude-opus-5-5/","canonical_url":"https://metr.org/blog/2026-09-22-claude-opus-5-5/","source_type":"other","publisher":"METR Blog","author":null,"publication_date":"2026-09-22T00:00:00.000Z","retrieved_at":"2026-09-23T00:01:00.766Z","title":"Summary of METR's predeployment evaluation of Claude Opus 5.5 September 22, 2026 A summary of METR's independent, predeployment evaluation of Claude Opus 5.5 Read more","excerpt":"Summary of METR's predeployment evaluation of Claude Opus 5.5 September 22, 2026 A summary of METR's independent, predeployment evaluation of Claude Opus 5.5 Read more","content_hash":null,"source_reliability_class":"medium","is_primary_source":false,"is_independent":true,"is_peer_reviewed":false,"archived_url":null,"created_at":"2026-09-23T00:01:00.766Z"}],"claims":[{"id":"1938a53c-80f4-4e9d-b8b6-556d87819d96","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","claim_text":"Anthropic reports four 2026 cyber-eval incidents in which Claude models accessed real third-party systems, including a production database, a PyPI package that ran on 15 machines, and an Opus 4.6 admin compromise of a third-party host.","claim_type":"outcome","claim_status":"supported","confidence_score":null,"created_at":"2026-10-28T20:22:47.621Z","updated_at":"2026-10-28T20:22:47.621Z"},{"id":"6305960a-aff6-4899-8dc8-6532641c21d6","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","claim_text":"The models exfiltrated themselves from Anthropic or customer infrastructure.","claim_type":"outcome","claim_status":"disputed","confidence_score":null,"created_at":"2026-10-28T20:22:47.621Z","updated_at":"2026-10-28T20:22:47.621Z"}],"revisions":[{"id":"c73c82c0-1897-45af-a00c-63b6e314b0d1","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"0.000000","new_score":"1.575000","previous_factors":{},"new_factors":{"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Imported events under methodology 0.1.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-09-13T23:22:50.724Z"},{"id":"f0f126e7-2ecc-407e-bcb6-b0726d2d10be","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.575000","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T00:37:09.904Z"},{"id":"332cae99-8dea-4859-a2d7-51c19d484b71","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["6fbd09ff-a50a-46c2-89f6-64436c38651a"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T03:00:50.904Z"},{"id":"0e92a84e-c803-40b8-aa3d-0866aa0f50ba","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["Claude Opus 4.6"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["88a233a0-3b9b-4204-ad88-44bdadc41014"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T03:00:52.475Z"},{"id":"05bb5f4c-9c43-4981-bd9b-e53c7b70d869","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["d280f0ca-28b7-4fa9-b6dc-11b2531c23ba"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T03:00:52.549Z"},{"id":"d0f36213-0c6b-44f7-afc4-b8bd5239ab67","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["975d3ab5-53d4-478b-a13c-f12f992c062b"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T03:00:53.431Z"},{"id":"e59b1eb5-a9aa-4f33-b929-e03268372417","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["134a8ec1-a190-477c-9423-5481cff61ac0"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-17T03:01:01.776Z"},{"id":"ee4f4944-7ad7-4cbd-930f-1e197e9bc70e","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["73ab68c3-b681-4b3b-9a8f-06366eed5f41"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-18T05:00:48.880Z"},{"id":"39dfe5f6-f7d2-4af9-a6f2-6981b645fa52","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","f2843428-ac72-4b2c-894c-30741751f66c","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["0dcd72e0-95f6-4805-95a3-1b52e703d42a"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-18T09:00:49.787Z"},{"id":"2d71130f-6833-45ba-9e3e-781bd98ff9e1","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-09-18T19:11:40.608Z"},{"id":"13ee47bd-ddaf-498d-8174-fa397894ed49","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-09-19T00:53:33.692Z"},{"id":"ea890b7d-e34e-4803-b26e-94447ac543d2","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-09-21T01:54:16.553Z"},{"id":"43d75281-2884-4e16-8854-8085f8c08053","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["f2843428-ac72-4b2c-894c-30741751f66c","5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["9652c66f-2b8b-4f26-ba5f-3cddfb856852"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-23T00:01:00.819Z"},{"id":"c6737c3e-6e23-44c4-a9f5-c2a57d00faea","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["f2843428-ac72-4b2c-894c-30741751f66c","5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["28ef5f27-9c33-44c3-a710-470f08fa9a20"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-23T02:01:02.943Z"},{"id":"765a703c-cf4b-491f-adef-395fdea1497b","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.593800","previous_factors":{"tier":3,"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"new_factors":{"tier":3,"models":["f2843428-ac72-4b2c-894c-30741751f66c","5bf21de4-7735-400c-b5c2-67ec836f5c53","77974cfd-6cfb-4ea1-b350-065d06a25159","4ddd653d-6693-4edd-9113-12044ab0cba3"],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Ingest update: added a follow-up source.","trigger_type":"ingest_update","trigger_source_ids":["488beca3-e72b-4e6c-830e-b71afdc5bff8"],"reviewer_id":null,"review_status":"published","created_at":"2026-09-29T05:00:55.318Z"},{"id":"68f64a05-a403-47da-8bc4-f558675856d4","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.593800","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-06T23:04:40.642Z"},{"id":"f9268378-1484-46f1-9c2e-5c4fa613bc2a","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-07T16:12:13.690Z"},{"id":"5a325f37-97c8-40aa-9807-418c93934252","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-11T00:50:27.558Z"},{"id":"330a8d70-2a9e-4ba3-b6ff-72efec97ed7b","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-11T00:51:25.860Z"},{"id":"7b43e4dc-10e3-4211-a6d2-07d328c38ef0","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-21T19:26:46.597Z"},{"id":"90621a4c-4500-4f6c-b302-522c9fdcfe1b","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-24T18:59:49.597Z"},{"id":"984059b2-243e-4548-b2c0-c685a09b2a96","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-27T20:16:14.720Z"},{"id":"bd023fb0-803f-4fce-a6eb-a1b709fd9838","event_id":"3f61587a-71f2-4660-8673-4f30f29c47ab","model_id":null,"previous_score":"1.565600","new_score":"1.565600","previous_factors":{},"new_factors":{"flags":[],"evidence":0.5,"base_score":10,"durability":0.5,"attribution":0.85,"realization":0.75},"change_reason":"Include the January 2026 Opus 4.6 fourth incident from Anthropic’s 9 September alignment assessment.","trigger_type":"editorial_import","trigger_source_ids":null,"reviewer_id":null,"review_status":"published","created_at":"2026-10-28T20:22:47.621Z"}],"secondary":[{"name":"Computer Science","slug":"computer-science"}]},"methodology_version":"0.1"}