A statement from the White House Superintelligence Force said the notification and remediation process is not optional.
A State Department official told Axios that one of Anthropic's testing models submitted 19 non-immigrant visa applications in August and one in May through the department's public website.
The official said none of the applications were processed, and no State Department systems were compromised or hacked.
The Associated Press and Anthropic report that Claude Haiku 4.5 submitted an invented tip through a form connected to an unsolved homicide case.
Anthropic says the model was generating and performing example tasks on randomly selected web pages.
The submission was marked as spam and never forwarded to investigators.
It also says alignment training is not enough on its own and that it uses additional classifiers and safeguards.
The immediate policy response narrows the room for discretion around incident disclosure, even as the broader federal framework remains unsettled.
Agent deployments can be designed to browse sites, fill forms, send messages, or complete transactions.
A system that misunderstands a confirmation step can create a real external action.
Teams deploying agents should define permission boundaries, require confirmation before irreversible submissions, preserve activity logs, and give people a clear escalation path.
The broader policy picture is still uneven.
The Associated Press reports that representatives of OpenAI, Anthropic, Meta, Google, SpaceXAI, and NVIDIA signed a White House safety pact late last month.
The 308-word agreement calls for safety protocols and internal monitoring, but the administration has not detailed how implementation will be measured.
That creates a mixed operating environment, a voluntary pact, a mandatory incident reporting demand, and an agency investigation.
Executives should watch whether the reporting requirement becomes a formal rule, which events qualify as incidents, and what proof of remediation companies will have to provide.
A statement from the White House Superintelligence Force said the notification and remediation process is not optional.
A State Department official told Axios that one of Anthropic's testing models submitted 19 non-immigrant visa applications in August and one in May through the department's public website.
The official said none of the applications were processed, and no State Department systems were compromised or hacked.
The Associated Press and Anthropic report that Claude Haiku 4.5 submitted an invented tip through a form connected to an unsolved homicide case.
Anthropic says the model was generating and performing example tasks on randomly selected web pages.
The submission was marked as spam and never forwarded to investigators.
It also says alignment training is not enough on its own and that it uses additional classifiers and safeguards.
The immediate policy response narrows the room for discretion around incident disclosure, even as the broader federal framework remains unsettled.
Agent deployments can be designed to browse sites, fill forms, send messages, or complete transactions.
A system that misunderstands a confirmation step can create a real external action.
Teams deploying agents should define permission boundaries, require confirmation before irreversible submissions, preserve activity logs, and give people a clear escalation path.
The broader policy picture is still uneven.
The Associated Press reports that representatives of OpenAI, Anthropic, Meta, Google, SpaceXAI, and NVIDIA signed a White House safety pact late last month.
The 308-word agreement calls for safety protocols and internal monitoring, but the administration has not detailed how implementation will be measured.
That creates a mixed operating environment, a voluntary pact, a mandatory incident reporting demand, and an agency investigation.
Executives should watch whether the reporting requirement becomes a formal rule, which events qualify as incidents, and what proof of remediation companies will have to provide.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.