Anthropic's two-stage anti-distillation classifier blocks attempts to extract Claude's reasoning with a false positive rate under 0.1%

Anthropic's October 2026 measures against distillation attacks, which are covert, large-scale efforts to copy a model's capabilities, usually through networks of fraudulent accounts.