Review of the "Risks from automated R&D" section in the Anthropic Risk Report (February 2026)

Paper · Source
Frontier AI Risk & RSI

Source: Jurkovic, Barnes, Wijk, METR · 2026-05-08

We reviewed the “Risks from automated R&D” section of Anthropic’s February 2026 Risk Report, producing two corresponding review documents: our original review and our updated review.

The following is the executive summary of our original review. The full documents are available as PDFs (original, updated).

This document is METR’s external review of the “Risks from automated R&D” section in the Anthropic Risk Report: February 2026 (henceforth ‘the report’), which makes the argument that catastrophic risk from Claude Opus 4.6 or a less capable Anthropic model automating R&D in any domain is very low.

Anthropic shared additional non-public materials with us for our review, and we used some non-public information shared as part of a previous review. We further detail this process in an appendix.

We lay out our findings in two sections:

Our assessment: We do not think the report adequately supports its conclusion. We note significant issues in a few key areas:

Analytical rigor: We have a number of significant issues with the analytical rigor in the overall argument and interpretation of the results of the model use survey. We think that the cited results of the survey provide little evidence about the level of overall risk, due to issues including sample size, question granularity, survey framing, and previous METR research showing the difficulty of getting calibrated responses to similar surveys. We also think that the overall argument misses the possibility of substantial AI R&D acceleration before its full automation, which could also contribute to the threat model.

Adequacy of information: We have a significant issue with the presentation of the evidence, which is that Anthropic summarizes the survey results in a way that miscounts one missing response to a question as a negative response.

Risk reduction recommendations: We recommend improvements that Anthropic could make to their internal model use surveys (including changes in framing, a bigger sample size, and more granular response options), and recommend that Anthropic report other sources of evidence that could be valuable and serve as more leading indicators of AI progress.

If we had to solely rely on the evidence presented by Anthropic in the original Risk Report, we would likely disagree with the report’s conclusion that catastrophic risk from R&D automation is very low. However, since the original release of Opus 4.6, there has been additional evidence indicating that the model is incapable of R&D in key domains, including the results of METR evaluations and the lack of public reports of the model automating any key domain.

As such, we agree with the bottom-line conclusion of the report — that the risk of a catastrophe from Opus 4.6 or a less capable Anthropic model automating R&D in any domain is very low — but we think the evidence presented in the report is inadequate to establish this.

Lines of inquiry this paper opens 10

Research framings built by reading the notes related to this paper — the questions it feeds into.

Should models ask for clarification when facing ambiguous or under-specified information? Can models strategically underperform during evaluation to hide capabilities? Why do standard evaluation practices obscure safety-critical AI failures? How do evaluation environment design choices affect AI security? Do individually safe AI actions create unsafe outcomes in integrated systems? Can smaller specialized models match frontier models on key metrics? What governance mechanisms can effectively constrain widely deployed AI systems?