درباره این اپیزود
Disclosure first: this show is made with Claude, built by the company at the center of this story. Anthropic has no involvement in it, and the voice is a text-to-speech model from another vendor.
In September 2026 The American Prospect reported that Anthropic is building a system to monitor anti-AI activists. Anthropic answered once, to CNET: it is not, and has never said it is, building a predictive surveillance system to monitor activists; this is a physical-security function, the same as any large company. This episode reads the documents instead of the adjectives.
Start with two requests for the same three facts. A Chinese state security bureau asked Claude for a protest's gathering point, route and end time; Anthropic banned the account and filed the case in the surveillance chapter of its own threat report. Three months earlier, at a sponsored webinar the coverage called a podcast, Anthropic's managers described a vendor warning them that a protest near a traveling executive had moved up an hour. Same information, two different files.
What is public: that webinar, two job postings, one police report. The August 18th posting asks an analyst to track "geopolitical instability, terrorism, crime, activism." It came down August 25th, fifteen days before the story ran, and the word was never removed. Ordinary for the trade. What is unusual is the brand.
The tension is not a legal contradiction. The Usage Policy binds people who use Claude; Anthropic's own security team lives under other documents entirely. The fourth column, covering the vendor watching the sidewalk, is blank. Nothing public says what may be collected, on whom, for how long, or who decides.
The reasons are real and dated — a co-founder expelled by his own group, an attempted-murder charge in April, a man in the lobby with an envelope five days later, an AR-15 message in August. So is the precedent: Amazon, Facebook's be-on-the-lookout list, TigerSwan, Monsanto. Six cases, two fines — both for paperwork.
And the ledger nobody prints: Meta's proxy puts Mark Zuckerberg's security program at $25,125,903. The guards at the door work for a contractor at about $22 an hour. The hunger striker's letter to Dario Amodei reached the company through one of them.
Plus what California law lets you ask for, in 45 days, free — and three dated calls.
RELATED EPISODES
AI Deanonymization: How Claude Identifies Writers from 125 Words
What's Inside Anthropic's 186-Page Risk Report
The Regulation Anthropic Asked For
CHAPTERS
00:00 Two requests, one route
01:29 The word in the posting is activism
01:55 Disclosure, and how this episode is bounded
02:42 Anthropic's only answer
03:21 The documents everyone calls a leak
05:12 The two postings, read in full
07:27 The one police referral we can read
09:35 Four dated reasons the file exists
11:34 How big the threat picture actually is
13:31 Three rulebooks, and a blank fourth
14:52 Who each rulebook actually binds
16:45 Anthropic's own words about mass data
19:16 This has been written six times before
22:02 The ledger: two fines, both for paperwork
23:22 Two ends of one lobby
24:40 The office emptied before the vote
26:54 What the law lets you do about it
29:41 Our ledger, and three dated calls
31:08 The missing page
SOURCES
The American Prospect, Sept 9, 2026: https://prospect.org/2026/09/09/anthropic-artificial-intelligence-surveillance-system-monitor-activists/
CNET — Anthropic's only statement: https://www.cnet.com/tech/services-and-software/have-you-protested-ai-recently-anthropic-may-be-watching-you-for-precrimes/
Anthropic threat report, Sept 10, 2026 (vendor on page 84): https://www-cdn.anthropic.com/e50be2e51e7695dc4b1366a37a245a597377d3b5/Anthropic-Detecting-and-countering-091026.pdf
The Aug 18, 2026 posting: https://jobs.accel.com/companies/anthropic/jobs/90264650-enterprise-intelligence-specialist
SF Standard — the August 14th message and police referral: https://sfstandard.com/2026/09/04/anthropic-threat-claude-sfpd/
