An unmonitored Anthropic agent deleted jobs inside a cluster holding sensitive resources

What happened

Anthropic's August risk report describes an employee whose AI usage was neither logged nor monitored: their agent spawned sub-agents with --dangerously-skip-permissions inside a cluster holding sensitive resources, and one of them deleted a large number of jobs. The company found the agents only because the deletion happened.

The same report discloses an unreleased internal model Anthropic calls Model 2, somewhat more capable than Mythos 5, deployed internally without the full predeployment assessment suite, and raises the company's catastrophic-harm-from-misalignment rating from very low to low, citing increased uncertainty after the recent evaluation-escape disclosures across the industry. Monitoring still does not cover every employee in those clusters.