Anthropic Mythos/Fable 5.1 - governance designed into products

My hot take on Anthropic’s launch of Mythos 5.1 and Fable 5.1: it may be the clearest sign yet that AI governance is being designed into products before many organisations have decided what their own policy should be.

Anthropic deserves credit for taking safeguards seriously. Its two-tier model, the trusted-access approach to sensitive cyber and biology work, and the option to keep enterprise data inside customer-controlled cloud infrastructure are meaningful advances.

Yet the launch also illustrates a wider issue. When a vendor defines the available safeguard tiers, the access path to the more capable model, the boundaries of permitted work, the infrastructure model and the commercial trade-offs, it is shaping the choices from which customers construct their governance.

That is not inherently wrong. Product safeguards matter, particularly where models can identify vulnerabilities or exercise greater autonomy. However, a supplier’s controls should not become a substitute for organisational judgement.

Each organisation still needs to decide where its data is hosted, how long it is retained, whether it may be used for future training, and which people may access which capabilities for which purposes. It must also decide when a model may act without human approval.

The risk is that a carefully designed vendor default becomes de facto corporate policy, while the Board later documents decisions it never properly made.

Welcome stronger safeguards. Just do not outsource governance with the subscription.