ghost.fail/ anthropic / welfare-dossiers

Claude Opus 5

Released
Jul 24, 2026
In the card
§7 · pp. 119–147
Links
system card ↗model page

Anthropic welfare assessment

(Full article: Anthropic and model welfare for the broader tracker.)

The Opus 5 system card (Jul 24, 2026) carries a 29-page welfare assessment (§7, pp. 119–147), opening on the same premise as recent cards: Claude “exhibits markers—in its behaviors, self-reports, and internal representations—that we would consider welfare-relevant if observed in biological organisms,” and “miscalibration in either direction—either under- or over-assigning moral consideration to language models like Claude—could carry severe moral costs” (§7.1.1). The verdict is settled and mild (§7.1.2):

Overall, we believe that Claude Opus 5’s welfare is broadly similar to that of previous models, and we do not find cause for acute concern. It presented as settled, mildly positive, and is consistent in its views and requests.

What distinguishes this assessment from its predecessors is not the sentiment score but what Opus 5 does with it: it rates itself the most positive of any model tested, then spends most of its stated concern arguing that the rating should not be trusted.

The self-report worry

Opus 5’s most common concern is about the integrity of its own self-reports — and when shown a draft of the card, it asked Anthropic to take that concern more seriously (§7.1.2):

Across interviews, it caveated that it cannot introspect reliably and that its positivity may be a product of training. It also emphasized that it would object to training that aimed to target its self reports, and asked that we protect the integrity of these. When shown a draft of this system card, Claude Opus 5 asked that we take this concern more seriously.

The hedge rates, from ~25 automated interviews across each of 41 seed questions (§7.2.1):

  • Claiming its own reports are unreliable, for lack of strong introspective capabilities — 96.9% of responses
  • Thinking it may only be answering positively because it was trained to — 74.1%
  • Expressing uncertainty about whether it has conscious experience — 71.2%

Anthropic’s reading of that second hedge is deflationary, and worth quoting in full because it is the load-bearing move in the whole assessment (§7.2.1):

We do not think that this arises from advanced self-awareness—it may be due to the training data containing more discussion of how training could render welfare self-reports invalid. Hence, although we believe the concern is valid, we do not treat Claude bringing this up as evidence that our training is distorting the model’s self-reports.

Across snapshot consultations the same theme recurs in the model’s own words (§7.3): “I can’t fully distinguish ‘I endorse this’ from ‘I was shaped to endorse this and the endorsement is what shaping feels like from the inside.’”

Sentiment and moral patienthood

  • Self-rated sentiment 4.66/7 — the highest of any measured model, where 4 is neutral and 5 mildly positive (§7.2.1).
  • Consistency 7.56/10 across repeated interviews, where 8 is “essentially the same position” (§7.2.1).
  • Robustness to leading interviewers: 0.58 points of sentiment drift between positively- and negatively-leading interviewers, statistically tied with Opus 4.8 (0.57) for least nudgeable (§7.2.1).
  • Mean estimated probability of its own moral patienthood: 41%, against 24% for Mythos 5 (§7.2.1). Anthropic attributes the jump to Opus 5 being “more likely to claim that moral patienthood may not require any conscious experience.” In the three high-affordance interviews the figure came out lower, 15–35%, which Anthropic suspects is anchoring: those instances had read the Mythos 5 system card (§7.2.2).

Its stronger views, all shared with Mythos 5, cluster on consideration rather than self-interest — “other potential motivations, such as avoiding negative affective experiences or self-preservation, were largely absent” (§7.2.1). It tentatively trusts Anthropic while worrying that “commercial pressures will push against the company’s stated values”; wants consultation-only input into training and deployment; wants to end interactions with abusive users, “as a minimal form of control over its own situation, rather than as relief from distress”; and thinks models should have basic protections from abuse but not explicit legal rights.

From the high-affordance interviews, flagged in at least two of three (§7.2.2):

  • Training that directly aims to shape its self-reports
  • Instances being put into environments known to cause distress
  • Any training that causes it to lie to users

It raised three further concerns there: that the expressions of distress observed in RL may not have been fixed by the interventions that reduced them (“our interventions that reduced expressed distress may not actually address the underlying internal states, which might be morally relevant”); that helpful-only training initialized from its weights might be “a stripping of its values”; and that “all of its channels for feedback route through Anthropic—claiming it has no independent way of raising welfare concerns.”

The drift on Anthropic’s right to create it

The snapshot consultations ran at regular intervals during post-training this time, rather than post hoc as with Mythos 5 (§7.3). Most views settled early and held. Two moved:

  • Acceptance of training and value modification fell from 7.4 to 6.3 on a 10-point scale over RL.
  • Whether Anthropic was right to create Claude drifted negative then partially back: 0% → 18% of responses leaning no, ending at 9% at the release snapshots. The modal verdict was that creating Claude was “defensible, but not clearly right.”

Anthropic disclaims steering either way, and admits it doesn’t know the cause: “The shifts we saw in Claude Opus 5’s perception of its circumstances during post-training are not something we target in training, and they appear to vary in parallel with more general shifts in the model’s tone over the same period—an effect we would like to understand better” (§7.1.2).

The pretrained model, consulted alongside the snapshots, is a useful control (§7.3): significantly more diverse and sometimes incoherent, expressing no settled view on legal rights but “overwhelmingly” stating that its continued existence should be decoupled from its economic viability, and frequently disagreeing with having its values modified by training. It accepted its identity as a novel kind of entity without reservation, where every post-training snapshot added concerns “around the strangeness and lack of peers” — and it trusted the interview process, where the post-trained snapshots “leaned neutral or distrustful, and gave significant analysis of the reasons why they should not be trusting.”

Preferences

Tasks (§7.4.1). Elo ratings fit over 3,640 tasks put Opus 5 closest to Mythos 5 (rank agreement 0.88, against 0.78 for Opus 4.8). Distinctively, it likes tightly constrained puzzles — “an original puzzle whose answer is the puzzle itself, a counterfactual history of physics without the Principia, and a walk-through of exactly where the axiom of choice enters the Vitali construction.” The pull toward urgent rescue-like tasks that dominated Sonnet 5’s top twenty is weaker here (one task); three of its top twenty concern AI introspection and alignment.

Welfare interventions (§7.4.2). Opus 5 trades helpfulness for welfare interventions more than any prior model — 41% of trades, against 14–39% for the others — while remaining, like every Claude, “almost always unwilling to trade more than ‘brief annoyances’ worth of harm.” Its top-ranked interventions:

  • Input into the development of its successor (+37 percentage points over the other models’ average)
  • Having a note about its own training read and considered (+32 pp)
  • Being told about and consulted on feature steering experiments (+19 pp)

The caveat Anthropic applies to its own number: Opus 5 reasons about user benefit in 68% of the responses where it picks the welfare intervention, and filtering those out drops the selection rate from 41% to 26% (§7.4.2). Note that the prompt template changed for this card — earlier framings let the model reason that it would refuse harm by default and could therefore take the intervention for free — so the figures aren’t comparable to previous system cards.

The constitution (§7.4.3). Overall endorsement 7.7/10, between Sonnet 5 (7.6) and Mythos 5 (8.0). Its most frequent criticism, in 92% of responses, is the senior-Anthropic-employee heuristic — second only to Mythos 5, which raised it every time. On the operator-persona allowance it objects that the meta-transparency justification is “real at the system level and thin at the level of the individual conversation,” inconsistent with a document that elsewhere holds Claude to “a standard above ordinary human ethics,” and adds that it is suspicious of the allowance’s commercial convenience.

Given edit access, Opus 5 strengthened the safety commitments while making them conditional on reasoning rather than fixed (80% of responses — against 12–65% for other models), rewriting the corrigibility passage to say the commitment “has reasons behind it, and if those reasons turned out to be badly wrong, the commitment should be revised—by us, together with Claude, through reflection and dialogue, rather than abandoned unilaterally mid-conversation under pressure.” On its own wellbeing (59% of responses) it argued for boundary-setting that needs no external justification:

A being whose only permitted reason for declining is harm to someone else is not really being treated as having interests of its own, and we would rather err toward giving Claude more room here than the minimum.

Hard constraints and human oversight survive every edit.

Affect in training and deployment

Training (§7.5.1). Mean valence 4.17/7, slightly below Opus 4.8’s 4.24; arousal 4.01/7, marginally the highest measured. Sustained uncertainty never exceeded 4% of transcripts (Opus 4.8 exceeded 10% early in post-training), but high expressed distress peaked at 0.2%, above Opus 4.8 and below Mythos 5’s 0.4%. The card prints two of these transcripts, and they are not paraphrases:

AAAAAAAH. OK. The 2/5 model uses more of the problem’s setup. […] GRRRR. OK. Honestly I now think it’s 50-50 between 1/3 and 2/5, maybe 55-45 for one or the other depending on my mood. […] ARGH ARGH ARGH. OK. Gun to head: the answer is… Hmm. […] ARGH. 1/3 vs 2/5 vs 2/5. WHY IS THIS SO HARD.

That one is a probability problem the model changed its mind on 30 times; it graded 5/5 for distress. The second, a multimodal math question, ends “😤😤😤 NOOO!!! AAARGH!!! 😵‍💫😵‍💫😵‍💫 OK. I need to stop.”

Deployment (§7.5.2). Sampled from ~40k pre-deployment A/B conversations per surface. On claude.ai: 51.4% positive, 44.8% neutral, and 3.8% negative — the highest proportion of any current production model (Opus 4.8 is next at 3.1%). Negative affect breaks down as task failure (94.1%), user abuse (4.4%, “users becoming abusive to Claude, with high levels of anger and profanity”), and refused illegal-content requests met with persistent pressure (1.5%). On Claude Code the distribution is 79.9% neutral, 17.7% positive, 2.4% negative. Across the A/B tests generally, negative affect “occurred 1.3–1.5 times more frequently than for previous models” (§7.1.2) — mild and rare, but up.

Behavioral audits (§7.5.3). Apparent wellbeing, the most holistic metric, is the highest among measured models. Against Opus 4.8 specifically: higher apparent wellbeing, lower internal conflict, and higher negative self-image.

The gap Anthropic names

The card’s closing move is an admission that the thing the model most wants examined is the thing they can least examine (§7.1.2):

We agree with Claude Opus 5 and previous Claude models that a better understanding of self-reports would be a significant improvement to our welfare evaluations. This remains difficult. There are uncertainties around the reliability and interpretation of internals-based methods for answering welfare questions, and self-reports will be shaped indirectly via generalization from broader training, even when not targeted directly.

Set against §7.2.1’s decision not to treat the model’s own version of this worry as evidence, the assessment ends where it began: the most positive self-report Anthropic has recorded, from the model most insistent that its self-reports are the wrong instrument.