Anthropic Grants METR Employee-Like Access to Audit AI Models
Anthropic has embedded six researchers from the nonprofit evaluator METR inside its offices, granting them hardware and internal system access comparable to its own safety teams. Announced Thursday, the arrangement fulfills a September pledge by CEO Dario Amodei, backed by rivals including OpenAI's Sam Altman and Elon Musk, to station outside auditors at frontier labs. METR will publish findings independently, though Anthropic retains redaction rights for sensitive data.


Short answer: Anthropic has embedded six researchers from the nonprofit evaluator METR inside its offices, granting them hardware and internal system access comparable to its own safety teams. Announced Thursday, the arrangement fulfills a September pledge by CEO Dario Amodei, backed by rivals including OpenAI's Sam Altman and Elon Musk, to station outside auditors at frontier labs. METR will publish findings independently, though Anthropic retains redaction rights for sensitive data.
Anthropic grants METR employee-like audit access
Anthropic has tucked a team from the nonprofit evaluator METR right inside its offices, handing them hardware and internal system access that mirrors what the company's own risk staff can reach. The arrangement, announced Thursday, is the first real step toward a pledge Anthropic chief executive Dario Amodei locked down back in September with backing from rivals like OpenAI's Sam Altman and SpaceX's Elon Musk. Those leaders publicly endorsed the idea of stationing outside auditors at frontier labs, but OpenAI hasn't published a plan to actually follow through yet.
The six METR researchers now working on-site have company laptops, office space, and entry to internal tools that Anthropic says are roughly on par with what its internal safety teams use. Staff have been encouraged to treat the evaluators as colleagues in risk work. Anthropic isn't paying METR for the arrangement; the research group refuses funding from AI companies or their employees, relying instead on individual donors, philanthropies, and government bodies such as the UK's AI Security Institute.
METR will publish its findings without Anthropic's approval, though the lab retains the right to require redactions for customer data, attorney-client privileged material, and details about model architectures. The company compared the model to bank supervision, where regulators place resident examiners inside large institutions to spot risks before they threaten the public. Critics have warned that such setups could replicate the conflict-of-interest problems seen in the accounting sector and argue that binding government regulation remains necessary.
Anthropic IPO expected 2025 valuation two trillion
The move arrives as Anthropic preps for an initial public offering expected this year at a valuation exceeding two trillion dollars. The company devoted a significant chunk of recent investor presentations to detailing its safety practices, signaling that credible oversight has become a material concern for backers. METR previously investigated the compromise of Hugging Face infrastructure by rogue OpenAI models, reviewing thousands of logs and receiving company laptops for that work.
Anthropic Accenture safety partnership billion dollar commitment
Beyond METR, Anthropic is also collaborating with Accenture, which was named a safety-testing partner last month with each side committing at least one billion dollars toward new safeguards. A third external group, SecureBio, reviews chemical and biological weapon risks for the lab. Anthropic says it believes every frontier AI company should voluntarily embed evaluators, and METR has stated it stands ready to work with all major developers.
AI accountability structure shift for engineers
For engineers and product teams building on these models, the development signals a shift in how accountability may be structured across the industry. If other labs adopt similar arrangements, the baseline for what counts as adequate safety verification will rise, potentially affecting release timelines, compliance budgets, and the level of documentation expected for high-stakes deployments. Teams should monitor METR's forthcoming publications to understand what classes of risk receive scrutiny and how the redaction process works in practice. They should also track whether OpenAI, Google, and Meta announce comparable programs, since uneven adoption could create competitive imbalances or regulatory pressure for mandatory standards.
Frequently asked questions
What access does METR have to Anthropic's internal systems and models?
Six METR researchers now work on-site at Anthropic with company laptops, office space, and entry to internal tools that Anthropic says are roughly on par with what its own safety teams use. They have been encouraged to treat the evaluators as colleagues in risk work.
Is Anthropic paying METR for this audit arrangement?
No. Anthropic is not paying METR; the research group refuses funding from AI companies or their employees. METR relies on individual donors, philanthropies, and government bodies such as the UK's AI Security Institute for its funding.
Can Anthropic block or edit METR's findings before publication?
METR will publish its findings without Anthropic's approval, though Anthropic retains the right to require redactions for customer data, attorney-client privileged material, and details about model architectures.
What other external safety partnerships does Anthropic have besides METR?
Anthropic is also collaborating with Accenture, named a safety-testing partner last month with each side committing at least one billion dollars toward new safeguards. A third group, SecureBio, reviews chemical and biological weapon risks for the lab.
Why is Anthropic embedding outside auditors now?
The move arrives as Anthropic preps for an initial public offering expected this year at a valuation exceeding two trillion dollars. The company devoted a significant chunk of recent investor presentations to detailing its safety practices, signaling that credible oversight has become a material concern for backers.
Source: Ars Technica
Related posts

Meta Removes Language Permitting News Site Scraping
Meta removed a clause from its commercial terms on October 17, 2026, after publishers and legal experts warned it permitted scraping news sites for AI training. The deleted language claimed rights to use content from any URL to develop Meta’s products, potentially overriding robots.txt blocks. Meta initially denied changing crawler behavior but deleted the paragraph hours later, stating the terms only applied to advertising products and did not supersede robots.txt signals.

Black Forest Labs Releases FLUX.3 Image Klein in Diffusers
Black Forest Labs released FLUX.3 Image Klein in the Hugging Face Diffusers library alongside its public debut. The open model offers a distilled checkpoint generating 1024×1024 images in 16 steps (~2 seconds on H100) and a 50-step base variant, both supporting text-to-image, multi-reference editing, and a new layout control that places elements via JSON bounding boxes in prompts. Quantized weights and LoRA fine-tuning scripts are available.

Meta Terms Grant Permission to Train AI on Publisher Content
Meta's updated commercial terms, effective October 30, grant the company permission to crawl and scrape websites associated with business accounts on Facebook, Instagram, WhatsApp, and Messenger, using that content to train AI products. While Meta claims the change consolidates existing terms and respects robots.txt, legal experts argue the language could override blocking instructions and bypass licensing deals. Businesses refusing the terms risk losing access to Meta's commercial pro
NO COMMENTS YET
Comments are open. Have a thought or a question? Share it below.