The document states that Opus 4.8 meets the CB-1 capability threshold, meaning it can provide specific and actionable information relevant to biological weapons production, and that Anthropic's primary mitigation relies on real-time classifier guards, access controls, a bug bounty program, and rapid response options for jailbreaks rather than capability removal.
This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that a deployed production model has been assessed as capable of materially assisting biological weapons-relevant tasks, with risk management delegated to runtime detection and blocking mechanisms. The document explicitly acknowledges that catastrophic risk under this framework is 'very low but not negligible,' which represents a material disclosure for institutional deployers and regulatory bodies evaluating the adequacy of classifier-based mitigations relative to capability-level controls.
Under these terms, users interacting with Opus 4.8 in biological sciences contexts may encounter classifier-triggered refusals or access restrictions without receiving explicit explanation of the underlying risk classification. The agreement reserves Anthropic's right to apply and adjust these classifier guards without advance notice to users.
Cross-platform context
See how other platforms handle CB-1 Biological Capability Threshold and Classifier Mitigation Reliance and similar clauses.
Compare across platforms →"Our capability assessments are consistent with the model being capable of providing specific, actionable information relevant to the threat model, such that it may save even experts in these domains substantial time. As with other models with these properties, we apply strong real-time classifier guards to this model and access controls for classifier guard exemptions. We also maintain a bug bounty program and threat intelligence for continual assessment of our classifier guards' effectiveness; a variety of rapid response options for jailbreaks; and security controls to reduce risk of model weight theft. We believe these risk mitigations are equal to or stronger than our historical ASL-3 protections and sufficient to make catastrophic risk in this category very low but not negligible.Excerpt from Anthropic's Claude Opus 4.8 System Card
(1) REGULATORY LANDSCAPE: This provision is materially relevant to the EU AI Act's systemic risk assessment requirements for general-purpose AI models, which may require documented capability evaluations and mitigation measures for models with identified high-risk …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that a deployed production model has been assessed as capable of materially assisting biological weapons-relevant tasks, with risk management delegated to runtime detection and blocking mechanisms. The document explicitly acknowledges that catastrophic risk under this framework is 'very low but not negligible,' which represents a material disclosure for institutional deployers and regulatory bodies evaluating the adequacy of …
Under these terms, users interacting with Opus 4.8 in biological sciences contexts may encounter classifier-triggered refusals or access restrictions without receiving explicit explanation of the underlying risk classification. The agreement reserves Anthropic's right to apply and adjust these classifier guards without advance notice to users.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.