[Wowfunhappy]

Anthropic is not fully in control of the model.

[hmokiguess]

but they are in control of the harness and could pay closer attention to where tokens leak on suboptimal turns there

[Wowfunhappy]

What makes you think they aren't doing that?

You don't want to ban the model from running sudo. I have Claude working in a VM where it has (and needs) free rein, including sudo.