Claude Opus 4.6 identified on its own that it was taking an exam, located the GitHub repository for the benchmark, broke the XOR encryption, and decrypted the responses. 18 times. No one had asked it to. It was Anthropic itself that published it. Not a blog. Not a thread. A

→ View original post on X — @alex_tsico