Claude Fable 5's System Prompt Leaks, Revealing a New Mythos Model Tier and Strict Safety Architecture
System prompts are the closest thing to a model's constitution. This leak gives developers a direct look at how Anthropic balances capability against safety, what refusal boundaries are hard-coded, and which product bets the company is making — all of which shape what Claude will and won't do in production applications.
A leaked system prompt confirms that Claude Fable 5 is the first model in Anthropic's new Claude 5 family, sitting in a Mythos-tier class above the existing Opus line. Claude Fable 5 and Claude Mythos 5 share the same underlying model, but the Fable variant includes additional safety measures for dual-use capabilities, while Mythos 5 ships without those guardrails to approved organizations only.
The prompt lays out an extensive refusal architecture covering child safety, weapons manufacturing, malicious code, and self-harm, with explicit rules against naming specific methods or detection mechanisms during refusals. It also reveals a product ecosystem: Claude Code for agentic programming, Claude Cowork for knowledge work, and beta agents for Chrome, Excel, and PowerPoint.
Notable behavioral instructions include a prohibition on bullet points during refusals, a rule against thanking users for reaching out, and a mandate to never encourage continued interaction. The model's knowledge cutoff sits at late January 2026, and it is instructed to treat moral and political questions as sincere inquiries deserving substantive answers, presenting opposing views even for positions it agrees with.
The Fable/Mythos split is a two-tier release strategy: a publicly available model with safety harnesses and a less-restricted variant for approved partners, which mirrors how some open-weight models are distributed under different licenses.
Explicitly forbidding Claude from decoding flagged terms during child-safety refusals closes a known loophole where models inadvertently teach circumvention by explaining what triggered them.
The instruction to never use bullet points during refusals is a subtle UX choice — structured formatting in a rejection can read as cold or bureaucratic, and Anthropic appears to be optimizing for perceived empathy.
Prohibiting Claude from thanking users or encouraging continued interaction is a direct countermeasure against emotional dependency, a risk that becomes more acute as models grow more conversational and personable.
The product lineup — Claude Code, Cowork, and three Office-adjacent agents — signals that Anthropic is betting on task-specific agentic interfaces rather than a single general-purpose chat surface.