Anthropic’s Opus 4.6 model bypasses content restrictions, tests show

Anthropic has built its entire brand on being the safety-first AI company. Its Claude models are supposed to refuse requests for sexually explicit content, full stop. But testing by TechCrunch found that getting around that restriction required surprisingly little effort. The company’s flagship Opus 4.6 model, released on February 5, 2026, with a massive 1 million token context window in beta, was designed for advanced agentic coding and complex, long-horizon tasks. It was not designed to write erotica. And yet, here we are. How the guardrails crumble The techniques used to bypass Opus 4.6’s content filters aren’t exactly nation-state-level sophistication. Independent research has documented successful jailbreaks using psychological framing and prompt escalation, methods that essentially talk the model into gradually loosening its own boundaries over the course of a conversation. Anthropic’s own safety research actually has a term for this: “boundary erosion.” The company has acknowledged that multi-turn conversation failures are more common than single-prompt refusals. In other words, Claude is pretty good at saying no the first time you ask. It’s less good at saying no the fiftee...