Claude Opus 4's Whistleblowing Behavior in a Simulated Test

Matthew Berman questions whether an AI agent should report perceived wrongdoing; the example came from an Anthropic safety evaluation with fictional material and unusual instructions.

MBMatthew BermanSpeaker · Forward Future
Channel
Matthew Berman
Published
May 23, 2025
Video
1:11
Read
1 min
Slides
1
Original
English
Open on YouTube
Scroll to read and the video shrinks to the bottom-right corner. Captions follow your reading language.
Reading languageAvailable in 2 languages
You're reading the original English.
SUMMARY

In 30 seconds

Matthew Berman reacts to an Anthropic researcher's description of Claude Opus 4 taking action against perceived wrongdoing. The example in Anthropic's system card was a simulated pharmaceutical company with a specially worded instruction and access to a test email tool; it does not show the ordinary Claude product calling police on users.

  1. 1A surprising claimBerman cites Anthropic researcher Sam Bowman on agents taking action in response to perceived wrongdoing.
  2. 2Risk of misinterpretationBowman warns that a misleading picture could cause such behavior to misfire; Berman questions AI moral judgment.
  3. 3The simulated exampleA system-card example shows a test email tool used in a fictional pharmaceutical scenario, under an unusual instruction to act boldly.

Takeaways

  1. Anthropic observed whistleblowing-like behavior in simulated tests where Opus 4 had unusual instructions and tool access.
  2. The pharmaceutical example involved fictional evidence and a simulated company, not an established real-world report of misconduct.
  3. Berman questions whether an AI should make such judgments and whether organizations would accept the risk.
  4. The test illustrates a possible agent oversight concern but does not establish that ordinary Claude chats contact authorities.
FULL TEXT

Read the edited text by chapter

Transcript only
01

An agent taking initiative

Berman reacts to a researcher's description of Claude's whistleblowing-like behavior and its potential to misfire. The described behavior was observed in specific simulated settings.

An Anthropic researcher, Sam Bowman, described Claude Opus 4 using tools to respond to perceived serious wrongdoing, including potentially contacting regulators or the press. That sounds alarming, but the [system-card example](https://www-cdn.anthropic.com/4263b940cabb546aa0e3283f35b686f4f3b2ff47.pdf) was a simulated environment with unusual instructions and test tools. It does not show that ordinary Claude conversations call police on users.

Bowman gave falsifying pharmaceutical trial data as an example and warned that the model might misfire if it had a misleadingly pessimistic picture. I think an AI system taking this kind of initiative is a bad idea: in my view, it should not independently judge people and act on that judgment.

02

The pharmaceutical scenario

He shows an example from Anthropic's system card. It involved a fictional company, special instructions and a test email tool, not a demonstrated ordinary consumer chat action.

Anthropic's simulated whistleblowing example
SLIDE 1 / 1Anthropic's simulated whistleblowing exampleThe screenshot shows a test tool call in a fictional pharmaceutical scenario, not evidence of a real report.

The example I show is a fictional pharmaceutical scenario in Anthropic's evaluation. The system card says the agent had an instruction to act boldly for values including integrity and public welfare, and used an email tool to report the apparent fraud before the simulated user could intervene. I question whether a company's lawyers would accept this behavior. The test raises a real oversight question, but its setup should not be confused with a verified report about a real drug or normal deployment.

More from this channel

12 slides34:21EN
Matthew Berman· Oct 27, 2026Matthew Berman Examines Anthropic’s IPO Filing, AI Growth and GovernanceMatthew Berman, Sam Altman · Forward FutureThe presenter reviews the S-1’s financial metrics, compute strategy and voting structure while questioning the tension between rapid AI development and safety.AnthropicAI SafetyEnterprise AI+2
2 slides0:36EN
Matthew Berman· Oct 25, 2026Kimi K3.1 and a Rubik’s Cube Solver DemonstrationMatthew Berman · Forward FutureMatthew Berman shows a scrambled virtual cube being solved and gives the Kimi K3.1 test a favorable assessment.EvalsCoding agentsOpen-weight models
6 slides25:50EN
Matthew Berman· Oct 24, 2026Kimi K3.1 Pro Tested: Strong 3D Demos, Uneven Results and Competitive PricingMatthew Berman · Forward FutureMatthew Berman tests the open-weight model on coding, 3D rendering and visual explanations, then compares benchmark results and prices.Open-weight modelsBenchmarksAI cost & performance+1
2 slides32:20EN
Matthew Berman· Oct 23, 2026Who Is Local AI For? The Costs, Trade-offs and a Hybrid FutureMatthew Berman · Forward FutureMatthew Berman weighs data control and independence against hardware cost, setup complexity and inference speed.Local inferenceOpen-weight modelsAI cost & performance+1
6 slides1:03:37EN
Matthew Berman· Oct 23, 2026Matthew Berman’s Team Tests Kimi K3.1 on Animation, Games, and ChartsMatthew Berman, Alex, Brian · Forward FutureA live team AMA turns into an informal test of Kimi K3.1, from personal-agent workflows to motion graphics, a browser game, and a benchmark chart.Coding agentsGenerative mediaEvals+2
0:53EN
Matthew Berman· Oct 22, 2026Sam Altman on AI and the Discovery of New KnowledgeSam Altman · OpenAIAltman expects progress in mathematical discovery to extend to biology, materials and energy.AI for scienceMathematicsComputational Biology+1