Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-10 · source-backed
In How we contain Claude across products, Anthropic reports classifiers intercept roughly 83% of overeager actions pre-execution, and Claude resists prompt injection at about 0.1% single-attempt success on Gray Swan benchmarks. Their conclusion from those numbers is that model-layer defenses cannot stop a determined egress, and their stated ordering is environmental containment first (sandbox, VM, egress proxy), model-layer second. The reasoning is clean: an egress proxy blocks the exfiltration POST regardless of the agent's intent, while a classifier only reduces the probability of that intent. If you take one thing from today, take that ordering.
Each link below shares sources, entities, or timing with this story.
Opus built by Anthropic / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Opus built by Anthropic); both cover Anthropic, Claude; reported by the same outlet (anthropic.com).
Anthropic partners with Block / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic partners with Block); both cover Anthropic, Claude; overlapping topics (agent, anthropic, block).
Anthropic released Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude; reported by the same outlet (anthropic.com).