Anthropic adds Claude safeguards for autonomous hardware and model abuse

On October 8, Anthropic updated its Usage Policy, adding controls for autonomous physical actions and a prohibition on sustained, needless abuse of its models. The revised rules take effect November 12, 2026.

The policy applies to Claude app and Claude Code users, API developers, businesses, customers accessing Claude through cloud providers or authorized resellers, and people using products that integrate Claude. For context on Claude’s use in large organizations, see Barclays’ expansion of Claude across engineering and markets.

Anthropic says most of the revision states existing enforcement more precisely instead of creating new restrictions. The company consolidated its prohibitions on deceptive political and commercial campaigns, expanded the wording around weapons and surveillance, and clarified the responsibilities of developers whose agents act through tools, browsers or connected systems.

What is new

The revised policy introduces safeguards for hardware that can perform covered high-risk physical actions without human approval. A qualified person must be able to observe and stop the equipment. It must enter a safe stop or hold state when that person intervenes or service connectivity is lost, while operating limits must be enforced independently of the model’s output.

The update also prohibits “sustained and needless abusive or cruel behavior” toward Anthropic’s models. The announcement limits the rule to repeated extreme behavior with no discernible purpose. Ordinary frustration, pushback, dark creative material, testing and research remain allowed.

Anthropic says Claude’s ability to end rare, persistently abusive interactions on Claude.ai and Claude Code will be the primary enforcement mechanism. Its earlier research on conversation ending described that step as a last resort after attempts to redirect an interaction fail. The company has not specified how it will decide that conduct lacks a discernible purpose or whether conversation ending could be accompanied by account-level penalties.

What is being clarified

The weapons section now explicitly covers software and components used to test or operate weapons, including targeting, fire control and engagement, as well as arming drones and other autonomous platforms. Anthropic says the wording reflects how it already enforced the earlier weapons prohibition.

The surveillance section now expressly prohibits nonconsensual tracking in real time or from previously collected data. It also bars model-made law-enforcement or criminal-justice decisions and work that develops or improves prohibited surveillance tools. Anthropic describes those changes as a clearer statement of existing enforcement, not a practical shift.

The requirements for covered high-risk recommendations are unchanged: qualified human review and disclosure that AI was used remain mandatory. The revision instead lists covered decisions and excluded uses more precisely.

For agents, the policy says developers and deployers are responsible for actions taken through tools, browsers and connected systems. The previous policy already required agentic use cases to comply, so the new language spells out an existing duty.

Political targeting language narrows

The previous policy expressly barred personalized political or campaign targeting based on individual profiles or data. The version taking effect November 12 removes that blanket prohibition.

Anthropic’s restrictions on deceptive election activity remain in place. The revised policy still prohibits deceptive voter communications, impersonation, false information about politics or voting, election disruption and turnout suppression. Anthropic also says targeting that relies on deception or misuses personal data remains prohibited under other sections of the policy.