How we contain Claude across products

Anthropic’s Max McGuinness: model defences are probabilistic, so Claude is contained by restricting what it can do, not what it does. An allowlisted domain let an attacker exfiltrate data: an allowlist grants capability, not just a destination. AWS creds leaked in 24 of 25 tries.