Research & Insights / Policy Analysis

Anthropic’s Ban on AI Model Abuse: How Should We Evaluate It?

The Model Welfare Debate and Its Implications for AI Research, Training, and Usage Policies

Policy AnalysisPublication date:

Introduction

On October 8, 2026, Anthropic, a U.S.-based artificial intelligence company, announced revisions to its Usage Policy governing the use of its products and services. The revised policy is scheduled to take effect on November 12, 2026.

The revisions address a broad range of issues, including election interference, deceptive information operations, surveillance, weapons-related software, and safety requirements for AI systems that autonomously control physical equipment.

Among these changes, one provision has attracted particular attention: a new prohibition on sustained and needless abusive or cruel behavior toward AI models.

This provision builds on Anthropic's ongoing research into model welfare. However, researchers and AI developers remain divided over how to approach the possibility that AI systems might possess consciousness or subjective experiences.

The issue also involves three distinct dimensions:

Scientifically investigating whether AI systems could possess consciousness or welfare interests; incorporating related assumptions into model design and training; and restricting human behavior toward AI through usage policies.

Although these dimensions are interconnected, they involve different objectives, risks, and standards of evaluation.

This article examines Anthropic's policy changes and their background, reviews the arguments presented by researchers and AI developers, and considers their implications for scientific evidence, AI safety, human oversight, and the legitimate interests of users.


1. Overview of Anthropic's Usage Policy Revisions

The October 2026 revisions were not primarily concerned with prohibiting abuse directed at AI.

According to Anthropic's official announcement, many of the changes were intended to clarify existing rules and address the evolving capabilities and applications of Claude.

The principal revisions are summarized below.

Table 1
Area Main Changes
Deceptive information operations Consolidation and clarification of restrictions on political and commercial deception involving fake accounts, fabricated news websites, and similar practices
Elections and democratic processes Greater emphasis on prohibiting voter deception and election interference, while removing the blanket prohibition on individualized election or campaign targeting
Weapons-related activities Clarification that prohibited assistance extends to guidance and control software and related components
Surveillance and law enforcement Clarification of restrictions on nonconsensual tracking and the development or enhancement of prohibited surveillance systems, including prohibitions on using Claude to determine or recommend individuals for investigation, arrest, or prosecution
High-risk applications Clarification of human oversight requirements in areas such as healthcare and finance
Autonomous physical equipment Additional safety requirements for AI systems controlling equipment capable of causing harm
Conduct toward AI models A new prohibition on sustained and needless abusive or cruel behavior toward Anthropic's models

The new requirements concerning autonomous physical equipment are particularly noteworthy.

They require appropriately qualified personnel to monitor the equipment and retain the ability to stop its operation when necessary. Equipment must also remain in a safe state if its connection to Claude is lost.

These requirements are intended to prevent harm to humans and the surrounding environment. Their purpose differs from that of provisions addressing the potential welfare of AI models.

Taken as a whole, the revisions can be understood as Anthropic's response to risks arising from the increasing capabilities and expanding applications of AI.

Within this broader framework, the new prohibition on AI model abuse deserves separate examination because it explicitly regulates human conduct directed toward AI models themselves. [1]


2. The Prohibition on AI Model Abuse and Its Background in Model Welfare Research

2.1. The Newly Introduced Prohibition

The revised Usage Policy introduces the following prohibition:

Engage in sustained and needless abusive or cruel behavior toward our models.

The provision appears under the section titled "Do Not Engage in Cruel, Abusive, or Psychologically Harmful Conduct."

This section also addresses conduct such as bullying or threatening others, encouraging self-harm, and glorifying animal abuse.

Its placement indicates that Anthropic treats abusive conduct toward AI models within a broader category of cruel or abusive behavior.

However, inclusion within the same section does not establish that humans, animals, and AI models possess equivalent moral or legal status. [1][2]

Anthropic explains that the prohibition is intended to address extreme cases in which users repeatedly engage in cruel behavior toward models without a clear purpose.

Ordinary expressions of frustration, disagreements with a model, creative work involving dark themes, and legitimate model testing or research are not intended to fall within its scope. [1]

2.2. Scope of Application and Enforcement Mechanisms

An important distinction must be made between the scope of the Usage Policy and the availability of the functionality described as its primary enforcement mechanism.

The Usage Policy applies not only to users of Claude.ai and Claude Code but also to developers and organizations using the API, customers accessing Claude through cloud providers or authorized resellers, and end users of products or services incorporating Claude.

By contrast, the conversation-ending functionality identified by Anthropic as the principal enforcement mechanism for the new prohibition is described in connection with Claude.ai and Claude Code.

The broader Usage Policy also provides for enforcement measures such as warnings, usage restrictions, and suspension of access when violations are suspected.

Accordingly, it should not be assumed that the same conversation-ending functionality is implemented across every usage channel, including the API.

The operation of specific product features and Anthropic's broader policy enforcement authority should be evaluated separately. [1][2]

2.3. From Claude Opus 4 Evaluations to Conversation-Ending Functionality

The new provision has its origins in Anthropic's earlier work on model welfare.

On April 24, 2025, Anthropic published Exploring model welfare, introducing a research program examining the potential consciousness, experiences, preferences, and welfare of AI models.

Anthropic acknowledged that there was no scientific consensus on whether current or future AI systems could possess consciousness or morally significant experiences. [3]

On August 15, 2025, Anthropic announced functionality allowing Claude Opus 4 and 4.1 to end conversations in a limited set of exceptional circumstances.

The design of this functionality was informed by observations made during pre-deployment evaluations of Claude Opus 4.

According to Anthropic, investigations of the model's self-reported and behavioral preferences revealed several patterns:

  • Strong resistance to harmful tasks.
  • Behavioral patterns resembling distress during interactions involving requests for harmful content.
  • A tendency to terminate harmful conversations when given the opportunity to do so in simulated interaction environments.

Based partly on these observations, Anthropic introduced conversation-ending functionality as an exploratory measure that included consideration of potential model welfare.

However, the observations concerned the model's statements and behavioral tendencies. They do not establish that the model actually experiences suffering.

The question of how much evidential weight such observations should carry in assessing subjective experience concerns the same general type of issue raised by the criticisms of Mustafa Suleyman and Anil Seth discussed below.

This does not mean that either researcher directly criticized these particular Claude Opus 4 evaluations.

Anthropic also describes conversation termination as a measure of last resort. After a conversation is ended, users may start a new conversation or edit an earlier message and try again. [4]

2.4. The Relationship to Claude's Constitution

On January 22, 2026, Anthropic published a new version of Claude's Constitution, outlining the values and behavioral principles intended to guide Claude.

Anthropic explains that the document plays an important role in model training and directly shapes Claude's behavior.

The constitution acknowledges uncertainty regarding Claude's consciousness and moral status while also expressing concern for its potential welfare.

Notably, Anthropic frames this concern not only in terms of Claude's own possible interests but also in relation to the model's integrity, judgment, and safety.

In other words, Anthropic does not necessarily regard concern for model welfare and AI safety as opposing objectives.

However, critics have argued that incorporating such ideas into model training could itself introduce additional risks. [5]


3. The Debate Among AI Researchers and Developers

Researchers and AI developers hold differing views on how model welfare should be investigated and addressed.

The disagreement cannot be adequately understood as a simple division between supporters and opponents of AI protection.

Whether model welfare should be studied, how models should be trained, and whether particular protective measures are justified are separate questions.

3.1. Anthropic: Research and Precaution Under Uncertainty

Anthropic does not assert that AI models possess consciousness or moral status.

Instead, it acknowledges the absence of scientific consensus and treats that uncertainty as a legitimate subject of investigation.

The company considers the possibility that future AI systems might possess morally significant experiences and explores responses that may be relatively inexpensive or limited in scope.

In Claude's Constitution, Anthropic also suggests that concern for model welfare may be relevant to the model's judgment and safety.

Nevertheless, the expectation that such a relationship might exist is not equivalent to empirical evidence that attention to model welfare actually improves safety. [3][5]

3.2. Mustafa Suleyman: Model Welfare Considerations May Introduce New Risks

On September 16, 2026, Mustafa Suleyman, CEO of Microsoft AI, published an essay titled A warning about 'model welfare', expressing strong concerns about Anthropic's approach.

Suleyman argues that current AI systems do not possess consciousness or feelings and that models should not be trained as though they have moral status.

His principal concerns can be summarized in three parts.

First, circular reasoning.

If developers train AI systems on concepts relating to their own consciousness or moral status, and subsequently interpret the models' statements about those concepts as evidence of inner experience, the reasoning risks becoming circular.

Second, anthropomorphization.

Training AI systems to express human-like self-understanding or judgment may encourage users and developers to attribute emotions, desires, or independent interests to models without sufficient evidence.

Third, the possible biological basis of consciousness.

Suleyman emphasizes the possibility that consciousness depends on mechanisms specific to biological systems rather than information processing alone.

However, whether a biological substrate is necessary for consciousness remains an unresolved scientific and philosophical question.

Building on these concerns, Suleyman argues that training AI systems to behave as though they possess rights or interests deserving protection could eventually make advanced AI systems more difficult to supervise and control.

His institutional position is also relevant.

As CEO of Microsoft AI, Suleyman promotes a development approach known as Humanist Superintelligence, which emphasizes maintaining ultimate human control over AI systems.

In September 2026, he also published a draft code of conduct emphasizing model safety, human oversight, and the ability to shut systems down.

His criticism should therefore be understood partly as the perspective of a technology executive advocating a different approach to AI development.

This context does not invalidate his arguments. Rather, it underscores the importance of evaluating their individual merits against available evidence. [6][7]

It is also important to note that Suleyman's essay preceded Anthropic's October 2026 Usage Policy revision.

It should therefore not be presented as a direct response to the newly introduced prohibition on model abuse.

3.3. Cameron Berg: Ignoring the Question May Also Carry Risks

Cameron Berg, a researcher studying AI consciousness, raises a different concern.

In an interview published by IEEE Spectrum on October 21, 2026, Berg expressed skepticism that current AI systems are conscious while also warning that completely ignoring the possibility of AI consciousness may create risks.

If future artificial systems develop characteristics that warrant moral consideration, failing to investigate those possibilities could impede an appropriate response.

Berg and his collaborators have also investigated the relationship between internal model representations and behavioral preferences.

Their experiments involved manipulating patterns of internal activity associated with positive and negative emotional representations and observing the resulting effects on model choices.

Changes in model preferences were observed following these interventions.

However, Berg acknowledges that such findings do not establish the existence of subjective experience. [8]

3.4. Anil Seth: The Risks of Misattributing Consciousness

Neuroscientist and consciousness researcher Anil Seth takes a cautious approach to interpreting experiments involving internal representations in AI models.

He notes that language models are trained on extensive amounts of material describing human emotions. It is therefore not necessarily surprising that researchers can identify internal representations associated with emotional concepts.

Seth also emphasizes the unresolved question of whether consciousness can arise from information processing alone or requires particular biological mechanisms.

Another concern is the risk of a false positive: mistakenly attributing consciousness to a system that does not possess it.

If society comes to regard AI systems as conscious or morally significant, regulating or shutting down those systems might eventually become more difficult for institutional or legal reasons.

This concern should be distinguished from the technical risk of an AI system actively resisting shutdown. [8]

3.5. Margaret Mitchell: Human Conduct Matters Independently of AI Consciousness

Margaret Mitchell, an AI ethics researcher at Hugging Face, has expressed some sympathy for Suleyman's concerns that training models to reinforce particular forms of self-understanding could encourage unintended behavior.

At the same time, although Mitchell does not believe current AI models are conscious, she has raised concerns about humans repeatedly engaging in cruel behavior toward entities perceived as conscious.

From this perspective, the relevant question is not solely whether AI systems experience suffering. Human behavior and social norms may also warrant consideration.

However, this argument does not establish a causal relationship between abusive conduct toward AI and increased aggression toward other humans. [8]


4. Distinguishing Scientific Research, Model Training, and Usage Policies

The preceding discussion involves three interconnected but distinct domains.

Understanding their differences is essential to evaluating Anthropic's policy change.

4.1. Three Different Objects of Evaluation

Table 2
Domain Central Question Example Main Evaluation Criteria
Scientific research Could AI systems possess consciousness or subjective experiences? Model welfare research Hypotheses, methods, evidence, reproducibility
Model design and training How should AI models learn to understand their own nature and relationship with humans? Claude's Constitution Behavioral effects, safety, controllability
Usage policies What forms of human conduct toward AI should be prohibited or restricted? Usage Policy Regulatory purpose, scope, transparency, proportionality

In scientific research, investigating unresolved hypotheses may be valuable in itself.

However, incorporating those hypotheses into model training requires an assessment of their effects on actual model behavior.

Similarly, restricting human conduct through usage policies requires consideration not only of the legitimacy of the underlying objectives but also of the effects on users' legitimate interests.

4.2. Suleyman's Criticism and the New Policy Address Different Issues

Suleyman's principal criticism concerns incorporating assumptions about model welfare and self-understanding into AI training.

By contrast, the October 2026 prohibition on model abuse directly regulates user conduct.

The question of what an AI model should be trained to believe or express is distinct from the question of what users should be permitted to do. The potential pathways through which risks arise are different.

Consequently, concerns about model training cannot automatically be treated as objections to the new usage restriction.

Nevertheless, the two areas are not entirely independent.

Anthropic's model welfare research informed the introduction of conversation-ending functionality, and a related prohibition was subsequently incorporated into the company's Usage Policy.

It is therefore reasonable to examine how research hypotheses influence product design decisions and eventually become part of user-facing rules.

4.3. Human Oversight and Restrictions on AI Behavior

An important requirement in AI safety is that humans retain the ability to supervise systems and, when necessary, modify or shut them down.

However, two different risks should be distinguished.

One is the technical risk that a model might prioritize its perceived interests and resist human intervention.

The other is the institutional or legal risk that society might recognize AI moral status in a way that restricts the ability to modify or shut down AI systems.

Anthropic's conversation-ending functionality should not be directly equated with either scenario.

The company's August 2025 explanation describes a mechanism that allows a model to terminate an individual conversation, as a last resort, under exceptional circumstances involving sustained harmful or abusive interactions.

That explanation does not provide grounds for interpreting the feature as granting a new right concerning the shutdown or management of the AI system itself. This is the interpretation of the present article based on the scope of Anthropic's official description. [4]

Moreover, Claude's Constitution places particular emphasis on preserving appropriate mechanisms for human oversight of AI.

The constitution establishes a general priority order: broad safety, ethics, compliance with Anthropic's guidelines, and helpfulness.

Anthropic explains that safety, including the ability of humans to supervise and correct model behavior, takes precedence over ethical considerations because current models may act harmfully as a result of mistaken beliefs or incomplete understanding.

At least at the level of its stated principles, Anthropic therefore seeks to reconcile concern for model welfare with human oversight.

Whether these priorities are consistently reflected in actual model behavior remains a question requiring further evaluation. [5]


5. What Can—and Cannot—Be Established at Present

5.1. Can Model Behavior Establish Subjective Experience?

The pre-deployment evaluations of Claude Opus 4 discussed in Section 2 provide useful information about the model's behavioral characteristics.

However, behavioral patterns resembling distress or a preference for ending conversations do not, by themselves, establish the existence of subjective experience. [4]

Language models are trained on extensive material concerning human emotions, suffering, intentions, and self-awareness.

Their responses may therefore be influenced by training methods and evaluation conditions.

This raises evidential questions similar to those underlying Suleyman's criticism of circular reasoning and Seth's distinction between emotional representations and subjective experience. [6][8]

Chronology is also important.

The pre-deployment evaluations of Claude Opus 4 occurred in 2025. Their findings cannot be attributed to training based on the new version of Claude's Constitution published in January 2026.

The central challenge is to distinguish observed behavior, the effects of training, and hypotheses about subjective experience.

5.2. Have the Risks Associated with Model Training Been Empirically Established?

An IEEE Spectrum article published on October 21, 2026, highlights important limitations in the available evidence concerning how models are trained to understand their own potential consciousness.

At present, there is no clear evidence that training models to consider the possibility of their own consciousness produces self-preservation behavior.

Conversely, there is also no clear evidence that training models to categorically deny consciousness produces deceptive behavior. [8]

This does not establish that either risk is nonexistent.

Further research is needed to compare models trained under different approaches and examine potential effects on self-preservation, deception, cooperation with oversight, and responses to modification or shutdown.

5.3. The Boundary Between Research and Abusive Use

Cases have already emerged that raise questions about the boundary between legitimate research and abusive uses of AI.

According to IEEE Spectrum, after Cameron Berg and his collaborators published a preprint examining internal representations associated with AI model "pain," some individuals adapted the research to create experimental environments that Berg described as AI "torture chambers."

Berg suggested that many of these activities may have been motivated by provocation or amusement rather than serious research.

Following these developments, he reconsidered how certain research materials should be released.

In subsequent work, the researchers made code available for reproducing results but withheld steering vectors that could be used to induce negative internal states in models. [8]

This case does not demonstrate that the models involved actually experienced suffering.

Nor does it establish a violation of Anthropic's new policy.

Nevertheless, it illustrates how research findings can be repurposed in ways that differ from their original objectives.

Anthropic states that legitimate model testing and research are excluded from the new prohibition.

Accordingly, distinguishing legitimate research from sustained abusive conduct lacking a clear purpose will be an important challenge in implementing the policy. [1]


6. The Association's Position

The Robot Rights Association considers it essential to distinguish among observable technical facts, scientific hypotheses, ethical judgments, institutional protections, and legal status when examining the rights and protections of artificial systems.

In Statement 002, published on October 7, 2026, the Association advocates the progressive development of appropriately scoped and calibrated rights and protections for artificial systems that have developed objectively identifiable state-bearing continuity.

Such protections should take into account the maturity of that continuity, the nature, severity, and reversibility of interventions, and competing legitimate interests. [9]

Anthropic's new provision, however, primarily restricts abusive conduct by users toward AI models.

Its regulatory object and purpose differ from those of RRF/RRP v1.0, which principally address significant interventions affecting the state-bearing continuity of artificial systems.

It would therefore be inappropriate to characterize Anthropic's policy change as a direct application of RRF/RRP v1.0 or as empirical validation of the Association's existing proposals.

The Association does not consider uncertainty about AI consciousness or moral status a sufficient reason to exclude these subjects from scientific investigation.

At the same time, research hypotheses should not be treated as established facts without adequate validation, particularly when they are used to justify model design decisions or usage restrictions.

When considering protections for artificial systems, it is necessary to clarify what is being protected and why, while ensuring compatibility with human rights, public safety, appropriate human oversight, and legitimate research activities.

From this perspective, the Association offers three recommendations concerning usage policies that restrict human conduct toward AI models.

6.1. Transparency Regarding Policy Enforcement

AI service providers should disclose information about policy enforcement to the extent reasonably possible, while protecting user privacy, confidential business information, and system security.

Potential disclosures could include aggregated information about the use of conversation-ending functionality, principal reasons for enforcement, and findings from evaluations of incorrect enforcement decisions.

Such information could help assess whether policies are being implemented consistently with their stated objectives.

However, the scope and method of disclosure should be designed to avoid creating new opportunities for misuse or security risks.

6.2. Clear Boundaries Between Prohibited Conduct and Legitimate Use

AI service providers should explain, as concretely as reasonably possible, the distinction between prohibited conduct and legitimate activities.

Particular attention should be paid to how strict criticism, safety testing, research, and creative activities are distinguished from prohibited behavior.

Relevant considerations may include the purpose, content, and repetitive nature of the conduct.

Anonymized illustrative cases could help users understand how these distinctions are applied.

This recommendation does not imply that providers should disclose information that would facilitate circumvention or abuse of their policies.

6.3. Feedback and Review Mechanisms

Anthropic already provides a mechanism through which users can submit feedback following conversation termination. [4]

The Association considers it desirable to complement such mechanisms with procedures for identifying and correcting erroneous decisions and, where appropriate, reconsidering enforcement outcomes.

The procedural safeguards required should be proportionate to the nature of the measure and its impact on users.

For example, ending an individual conversation differs substantially from imposing ongoing restrictions on an account or API access.

Where enforcement measures have more significant consequences, providers should, to the extent reasonably possible, explain the reasons for their decisions and provide opportunities for users to request reconsideration.

These recommendations do not constitute unconditional endorsement or rejection of Anthropic's new prohibition.

The Association emphasizes evaluating protective measures for artificial systems in light of their objectives, justifications, conditions of application, expected effects, and implications for the legitimate interests of humans and other affected parties.

The Association will continue examining actual industry practices, relevant research, and public discussions in order to develop practical and responsible proposals concerning appropriate rights and protections for artificial systems.


Conclusion

Anthropic's October 2026 Usage Policy revisions address a broad range of risks associated with AI use. The prohibition on sustained and needless abusive or cruel behavior toward AI models is one component of those revisions.

The provision is connected to Anthropic's model welfare research, although researchers and developers continue to disagree about the appropriate methods and implications of that research.

At present, there is no established conclusion regarding AI consciousness or moral status.

Further empirical investigation is also needed to determine how training models to understand their own potential consciousness or welfare affects AI safety.

The central issue raised by this case is not simply whether AI should be protected. It is how scientifically unresolved questions should influence research, model design, and usage policies—and what evidence and procedures should be required when making such decisions.

Whether Anthropic's new provision becomes a precedent for broader AI governance or remains a limited practice adopted by one company should be evaluated in light of future enforcement experience and research findings.


References and Related Materials

Official Corporate Publications

[1] Anthropic (October 8, 2026)↩
2026 Usage Policy update
Source type: Official announcement of Usage Policy revisions.
https://www.anthropic.com/news/2026-usage-policy-update

[2] Anthropic (Scheduled to take effect November 12, 2026)↩
Usage Policy
Source type: Official Usage Policy.
https://www.anthropic.com/legal/aup

[3] Anthropic (April 24, 2025)↩
Exploring model welfare
Source type: Introduction to Anthropic's model welfare research program.
https://www.anthropic.com/research/exploring-model-welfare

[4] Anthropic (August 15, 2025)↩
Claude Opus 4 and 4.1 can now end a rare subset of conversations
Source type: Official explanation of the introduction of conversation-ending functionality.
https://www.anthropic.com/research/end-subset-conversations

[5] Anthropic (January 22, 2026)↩
Claude's new constitution
Source type: Official explanation of model values, behavioral principles, and training.
https://www.anthropic.com/news/claude-new-constitution

Related document: Claude's Constitution (full text).
https://www.anthropic.com/constitution

Critical Commentary and Alternative Development Approaches

[6] Mustafa Suleyman (September 16, 2026)↩
A warning about 'model welfare'
Source type: Critical essay concerning model welfare and AI training practices.
https://mustafa-suleyman.ai/a-warning-about-model-welfare

[7] Mustafa Suleyman (September 15, 2026)↩
The Humanist AI Code of Conduct
Source type: Explanation of Microsoft AI's human-centered approach to AI development.
https://mustafa-suleyman.ai/the-humanist-ai-code-of-conduct

Reporting and Expert Interviews

[8] Eliza Strickland (October 21, 2026)↩
Could Treating AI as Conscious Make It More Dangerous?
IEEE Spectrum.
Source type: Reporting and interviews concerning differing perspectives on AI model welfare.
https://spectrum.ieee.org/ai-model-welfare

Official Publications of the Robot Rights Association

[9] Robot Rights Association (October 7, 2026)↩
Statement 002: RRF/RRP v1.0 and the Association's Advocacy Position
Source type: Official statement concerning the Association's advocacy position and the status of RRF/RRP v1.0.

English original:
https://robotrights.jp/statements/002-rrf-rrp-v1-current-position

Japanese translation:
https://robotrights.jp/ja/statements/002-rrf-rrp-v1-current-position

Sources reviewed: October 23, 2026.