Biologists and life sciences researchers are reporting that Anthropic’s Claude Fable 5, launched June 9, is blocking them from using the model for basic research queries because its automated safeguards identify them as potential biosecurity risks based on their professional profiles.
Prof. Derya Unutmaz, a biologist at the Jackson Institute, told The Telegraph he cannot interact with Fable 5 at all under his normal account. “I can’t even say ‘hello’ to Fable 5 except in incognito mode because it knows I am a biomedical researcher,” he said. In a separate post, he wrote: “I can’t even say the word ‘cancer’ to Fable 5.”
James Schnable, a plant geneticist at the University of Nebraska, wrote on X: “As far as I can tell, Anthropic just decided to blacklist every biologist in their customer base.”
How the Restrictions Work
Fable 5 is the first Mythos-class model Anthropic has released for general availability. It is the same underlying model as Claude Mythos 5, which remains restricted to vetted partners through Project Glasswing. The difference is the safeguard layer.
According to Anthropic’s support documentation, Fable 5 runs automated safety checks on every request, blocking three categories: offensive cybersecurity techniques, biology and life sciences queries, and extraction of the model’s internal reasoning. When a block triggers, the system silently reroutes the query to Claude Opus 4.8, a less capable model. Users are not charged Fable prices for rerouted requests.
The checks review not just the user’s latest message but “everything the model reads, including memory, content from connectors, web search results, and files,” according to Anthropic. This means a block can be triggered by content the user did not type.
Anthropic’s Matt Durant, a life-sciences researcher at the company, confirmed that the model redirects all biology questions from identified researchers to a less powerful version. He said the company is “moving toward a trusted access program so researchers can use Mythos-class models for biology.”
The Capability That Triggered the Restrictions
Anthropic justified the restrictions by pointing to Fable 5’s biology capabilities. In its launch announcement, the company said the model can “consistently produce novel, compelling scientific hypotheses” in microbiology and conducted “novel genomics research in over a week of largely autonomous work.” The company described the bioweapon production risk as “low, but higher than for any previous model.”
Separately, Anthropic’s research team published “Paving the way for agents in biology” on June 8, documenting how AI agents struggle with biological data infrastructure. The paper found that even the strongest models could not reliably retrieve viral sequence data from NCBI Virus without deterministic retrieval tools, but accuracy rose to nearly 100% once such tools were added. The implication: autonomous biology agents are not yet reliable on their own, but the gap is closing.
Wei Xing, an assistant professor in mathematical sciences at the University of Sheffield, raised a different concern: researchers using Fable 5 now cannot be sure whether the model’s answers represent “the model’s genuine best effort, or something quietly reduced.” The silent rerouting to Opus 4.8 means users may not know when they are receiving degraded output.
Anthropic acknowledged the safeguards are “tuned conservatively” and will “sometimes catch harmless requests.” The company said it is working to reduce false positives “as quickly as we can.”
What Comes Next for Restricted Researchers
Anthropic has signaled two paths forward. Durant’s mention of a “trusted access program” suggests a vetting process similar to the existing Mythos 5 access through Project Glasswing, which currently serves cyberdefenders and infrastructure providers. The Fable support page notes that automatic model switching can be disabled in some contexts, though doing so means blocked queries return an error instead of a rerouted response.
For now, biologists who need frontier AI capabilities face a choice: use Fable 5 and accept that biology queries will be silently downgraded, switch to competitors that do not impose domain-specific blocks, or wait for Anthropic’s trusted access program to materialize.