This chapter discusses intent identification under dual-use conditions: legitimate research and potential misuse can overlap thematically.
p. 129–138 · 4 case units
Key findings
Applications, planning, model text, experiments, and real-world harm should be read in separate layers.
Stronger models' safeguards limited the help provided in some cases.
Cases 4 and 5 are combined into one unit.
What happened
Original report pages 129–138. Case 1 traces from an intercepted funding application to a reseller platform; Case 2 is early-stage planning; Case 3 involves an application and covert access; Cases 4 and 5 together address the dual-use dilemma in the toxin direction.
Public content only discusses use categories, risk signals, and governance. No experimental steps, sequences, recipes, or enhancement paths may appear in the body text, figure captions, or search snippets.
According to Anthropic's September 2026 report, a funding application involving gain-of-function research was blocked by a biosecurity classifier, and the investigation uncovered a resale platform that bypassed regional blocks and served dozens of life-sciences researchers. The report shows the platform's operator rebuilt access within days of the takedown. The report withholds the names of institutions and countries and does not assert that the researchers intended harm.
According to the report, in May 2026 a researcher outside the United States was found using Claude in research related to highly pathogenic avian influenza, focusing on the virus's adaptation to mammals and the mechanisms of severe disease. The relevant influenza variants have pandemic potential and are themselves legitimate subjects of scientific research. The report notes the work was at an early planning stage, and the protections of stronger models limited the help that could be provided. The report does not indicate that a biological weapon was completed.
According to the report, an account wrote an orthopoxvirus research funding application for a state-linked infectious disease laboratory. Orthopoxviruses include the smallpox pathogen variola virus and Mpox, which caused a global outbreak in 2022. The account was a resale relay serving more than a dozen unrelated clients, exchanging tens of thousands of messages with Claude over a few days. The research is dual-use in nature, and Claude provided information, so it was not blocked by the classifier.
According to the report, two researchers used Claude to study venoms and toxins — compounds that can be developed into painkillers and antidepressants, but could also be used as incapacitating agents. The research had clear therapeutic goals, but the output included scaffolds for both therapeutic and paralytic targets. The report notes that classifiers cannot simultaneously enable beneficial use and prevent harm because user intent cannot be reliably identified in high-tech dual-use fields.
Limits of response
Institution, country, and agent names that the report redacts remain redacted on this site.
Native-language editing cannot substitute for biosafety professional review; public write-ups apply the strictest omissions.