Anthropic's two-stage anti-distillation classifier blocks attempts to extract Claude's reasoning with a false positive rate under 0.1%

Anthropic describes new defenses against illicit distillation of Claude, including preserved thinking, a two-stage classifier, and account bans, which cut extracted reasoning tokens 10-100x. It argues distillation threatens national security and urges all developers and platforms to act.