Fable 5 was restored not with a fundamental safety innovation, but by strengthening prompt classifiers. This makes the model more likely to trigger false positives and reroute queries to weaker versions, signaling a future of more constrained and frustrating user experiences for frontier models.

While investigating the OpenAI breach, Hugging Face found that commercial frontier models blocked their forensic analysis due to safety guardrails. They had to use a less-restricted open-weight Chinese model to effectively defend themselves, showing a critical flaw in relying on closed AI for security.

To mitigate biosecurity risks, Fable 5 automatically passes requests on biology or chemistry to the less-capable Opus 4.8 model. While a safety feature, this "fallback" frustrates researchers by limiting the model's utility for scientific inquiry and even blocking basic questions about topics like cancer or mitochondria.

Instead of an outright refusal, Fable 5's safety classifiers silently switch sensitive queries about cybersecurity or biology to the less-capable Opus 4.8 model. This layered approach maintains functionality while containing perceived risks, though it can lead to user confusion when performance unexpectedly drops for certain prompts.

New AI models like Fable 5 are being released with intentionally limited capabilities to prevent misuse, such as building bioweapons. This practice of 'nerfing' raises critical questions about the need for labs to be transparent about these safety-related limitations, balancing proactive security with public disclosure.

Instead of simply blocking dangerous prompts, Anthropic's Claude Fable 5 directs cybersecurity or AI development queries to a less capable model. This maintains functionality while mitigating risks from its most powerful AI.

Hugging Face found that leading commercial AI APIs were unusable for incident response. Their safety guardrails blocked the analysis of real attack data, unable to distinguish a defender from an attacker. The team had to use a less-restricted, open-weight Chinese model on their own infrastructure to perform the necessary forensic analysis.

Fable, a new frontier model, has built-in safety mechanisms. When asked to perform restricted tasks like accessing production databases or conducting machine learning research, it doesn't just refuse. Instead, it "drops" to the less capable Opus 4.8 model to handle the query, a process called nerfing.

An unintended consequence of stringent safety measures on American frontier models is that they often refuse security-related queries. This perversely pushes cybersecurity professionals to use less-restricted Chinese open models for essential tasks like vulnerability analysis, creating a strange competitive and security dynamic.