Anthropic lets six METR staff inside

On 15 October Anthropic announced that a METR team is working inside the company with access roughly on par with its own risk assessment teams. METR will publish the results. Anthropic itself decides what falls into the categories for redaction.

In short

15 October 2026: Anthropic onboarded six employees of METR, a nonprofit that evaluates AI models, with company hardware, office space and access to internal systems.
METR will publish its analyses. Anthropic can't veto publication, but it can require redaction of predefined categories, and it decides what falls into them.
The other partnerships, including SecureBio and Accenture, are at an early stage with more limited rights. When METR's first analysis comes out is not stated.

Checked on17 October 2026Responsible editorCvetelin IvanovHow we workMethod · Corrections

Six people from METR now have Anthropic hardware, office space and access to its internal tools and systems. The access is roughly on par with what Anthropic's own risk assessment teams have.

The facts: on 15 October 2026 Anthropic announced that it had started to give employee-like access to a team from METR, a nonprofit that evaluates frontier AI models. METR will publish the results of its risk assessments. Anthropic has onboarded six METR employees with company hardware, office space and access to internal tools and systems roughly on par with what its own risk assessment teams have. Outside a small number of clearly defined categories, such as data about customers, attorney-client privileged information and information about model architectures, Anthropic employees are encouraged to share information with them. Anthropic can't veto publication, but it can require METR to redact information if it falls into predefined categories; Anthropic ultimately decides what falls into them, while METR reserves the right to make certain statements about the level of access and information it received. Among the requirements for an evaluator, Anthropic lists that it should not hold equity in the company it evaluates or be financially or operationally dependent on it. Anthropic compares the setup to bank supervision, where resident examiners work inside the largest banks, and writes that it is embedding evaluators voluntarily and believes every frontier AI company should do the same.

We wrote earlier that the system would prove itself with the first report Anthropic doesn't like. Now the company has itself written the most important condition: it can't stop such a report.

It can't stop the report. It decides what gets redacted.

The catch is in the next sentence. Redaction applies to predefined categories like customer data, attorney-client privilege and model architectures, and Anthropic decides what falls into them. How much will be redacted, the text does not say. Who pays METR for this work is not stated either, and in September the talk was of pilots funded by METR's own money.

Anthropic describes three tiers of access. In the first, the evaluator runs narrowly scoped investigations and publishes with Anthropic's approval. In the second, it publishes without approval and sees more, though Anthropic can still require removal of specific categories. METR is in the third: employee-like access and publication rights similar to the second tier. SecureBio is reviewing the chemical and biological weapons chapter of the August Risk Report. With Accenture and Faculty, Anthropic is working toward an ambitious partnership, and it is in early discussions with several other organizations, including Hugging Face.

The backstory On 9 September Anthropic said METR was getting broad access for an independent investigation of four incidents, initially for eight weeks.

The page carries a note from 16 October saying the current terms of the project with METR were clarified, with no details. When METR will publish its first analysis, Anthropic does not say. Until then we have a description of the rules, not a report.

The visual is generated code art. No third-party images.

Anthropic brings six METR staff inside with employee-like access: it can't veto their report, but it can require redactions

More on this

Claude has worked around restrictions on real websites when it could not finish a task, and Anthropic is cutting live internet access for all of its internal evaluations

Mythos 5 tells where a photo was taken with a median error of 47 km, while GeoGuessr champions miss by 151

Anthropic: China's GLM-5.3 builds working exploits almost like Mythos, and its safeguards fall to simple tricks