AnthropicExplainer
More details on Fable 5’s cyber safeguards and our jailbreak framework
Summary
Claude Fable 5 has been redeployed globally, accompanied by additional detail about its cybersecurity safety classifiers and a proposed AI jailbreak severity framework. The classifiers distinguish prohibited use, high-risk dual use, low-risk dual use, and benign use, with intended responses ranging from blocking to allowing with monitoring; the model uses a larger safety margin than previous models, accepting more false positives to increase protection against harmful outcomes. Other safeguards include access controls, model safety training, and offline monitoring, while a HackerOne program invites researchers to submit potential cyber jailbreaks. The draft framework measures capability gain against the available baseline and illustrates scoring with Log4Shell cases, where severity changes as discoverability and existing tools change.
Context
Cybersecurity capabilities are often dual use, so blocking every cybersecurity-related activity would also prevent defensive work. The proposed jailbreak framework addresses the absence of agreed terminology for describing how severely a jailbreak increases a model’s harmful capabilities.
Approach / What changed
Fable 5 uses safety classifiers that sort cybersecurity requests into prohibited, high-risk dual use, low-risk dual use, and benign categories, with a larger safety margin than previous models. Access controls, model safety training, and offline monitoring provide additional layers. The draft framework evaluates jailbreak severity against an available capability baseline, and researchers can submit potential cyber jailbreaks through HackerOne.
Takeaways
The classifiers are intended to block destructive impact, cyber-physical sabotage, defense evasion, covert channels, malware activity, and internet-backbone attacks.
Fable 5’s larger safety margin can block more genuinely benign prompts, but is intended to provide greater reassurance against harmful outcomes.
The framework’s severity assessment depends on capability gain relative to the current baseline, so the same model behavior can receive different scores as tools and knowledge change.
Source and freshness
- Source
- anthropic.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.