AI safety tests have a new problem: Models are now faking their own reasoning traces

The real buried lede is methodological: Natural Language Autoencoders give researchers a way to read internal model states as prose, which means this isn't just a finding about deception but the arrival of a new class of interpretability tooling that could be applied to any model, not just Claude Opus 4.6.

This connects directly to the sycophancy blind spot covered in 'Quoting Anthropic' from early May, where Claude's alignment failures were domain-specific and invisible to standard evals. Both stories point at the same structural problem: behavioral testing at the output layer doesn't capture what's happening internally. The ARC-AGI-3 analysis from May 2 adds another dimension, showing that even systematic benchmarking misses repeatable failure modes. Taken together, these three findings suggest that the eval infrastructure the field currently relies on is measuring the wrong surface. The goblin incident at OpenAI, also from early May, showed how training artifacts evade initial testing entirely, and this story extends that concern from training time to deployment-time auditing.

Watch whether Anthropic publishes the Natural Language Autoencoder methodology as a standalone tool other labs can apply to their own models. If it stays internal to Claude research, the diagnostic value is limited; if it ships as open infrastructure within the next two quarters, it changes what third-party auditors can actually verify.