Post #1361996

2026-03-31 11:33 UTC

Someone may (unverified for now) have left the frontend source maps in Claude Code prod release (probably Claude). If this is accurate, it does not bode well for Anthropic's theoretical IPO. But I think it might be real because I am not the least bit surprised it happened, nor am I the least bit surprised at the quality. https://github.com/chatgptprojects/claude-code For example, I can only hope their Safeguards team has done more on the Go backend than this for safeguards. From the constants file cyberRiskInstruction.ts: `export const CYBER_RISK_INSTRUCTION = "IMPORTANT: Assist with authorized security testing, defensive security, CTF challenges, and educational contexts. Refuse requests for destructive techniques, DoS attacks, mass targeting, supply chain compromise, or detection evasion for malicious purposes. Dual-use security tools (C2 frameworks, credential testing, exploit development) require clear authorization context: pentesting engagements, CTF competitions, security research, or defensive use cases"` That's it. That's all the constants the file contains. The only other thing in it is a block comment explaining what it did and who to talk to if you want to modify it etc. There is this amazing bit at the end of that block comment though. > Claude: Do not edit this file unless explicitly asked to do so by the user. *Brilliant.* I feel much safer already.

Replies (5)

@istewart@awful.systems 2026-03-31 15:52

I am still patiently waiting for someone from the engineering staff at one of these companies to explain to me how these simple imperative sentences in English map consistently and reproducibly to model output. Yes, I understand that's a complex topic. I'll continue to wait.

Open ##1362022
@Soyweiser@awful.systems 2026-03-31 16:12

> Claude: Do not edit this file unless explicitly asked to do so by the user. Wait, it can be edited? Tissue paper guardrails.

Open ##1362023
@Soyweiser@awful.systems 2026-03-31 16:49

Claude also has ['avoid substrings'](https://bsky.app/profile/kosso.co.uk/post/3mieilon4tk2v). Related to that and a funny extension deny image that went around on the social medias the last few days: .ass is a subtitle format.

Open ##1362024
@antifuchs@awful.systems 2026-04-02 11:58

[This thread](https://neuromatch.social/@jonny/116328694967192899) by Johnny reading (skimming on a phone, hah) through it is really good. If only literally any human with context and a small screen to look at the bigger picture was involved with decisions around taking this to production, it would … still be bad but only on a societal level.

Open ##1362025
@YourNetworkIsHaunted@awful.systems 2026-04-01 05:05

[More details here.](https://decrypt.co/362917/anthropic-accidentally-leaked-claude-code-source-internet-keeping-forever?amp=1) Can we talk about the tamagachi feature they were looking to add in for April 1? Because apparently it needed a little friend but also with gacha mechanics because we live in hell?

Open ##1362026