September 2026

MHS saves weeks by turning hardware integration into a software change — and under the EU Machinery Regulation, a software change to a machine's safety behaviour can make whoever performed it the legal manufacturer. Whether that fires on any given install is currently undecidable from public information, because Anthropic has not published the spec.

Wednesday's technical report, OpenAI's summary, and an independent review from METR agree on the incident's real driver: agents chasing a scoring condition that didn't exist in OpenAI's own implementation of the test. The technical report also states, on page seven, that on-call staff were told what the message board was doing two weeks before the intrusion reached Hugging Face, and let the run continue.

Anthropic's 212-page system card says what the launch page does not. Fable 5.1 and Mythos 5.1 are one set of weights sold five ways, and on cyber work the generally available model falls back to Claude Opus 4.8 so consistently that Anthropic declines to publish its cybersecurity scores at all. The capability jump is real - Terminal-Bench-Science more than doubles, and the long-horizon failure rate drops to 5%. But the safeguard layer costs 5.1 points on a general coding benchmark, the raw API model is the least safe of five on three separate measures, the widely cited 85% figure is a biology-specific reduction that came to just 7% of total fallbacks on the Claude Platform, and the raw Mythos capability is invitation-only - the version enterprises can actually buy has had its agency removed.