SafetyPage

System Card: Claude Haiku 5.5

System cardAnthropic7 Oct 2026144 pages

Read at anthropic.com
Cite
anthropic:claude-haiku-5-5-system-card/r1/p1
https://safetypage.noahairmet.com/d/anthropic/claude-haiku-5-5-system-card/r1/p1
@misc{anthropic2026,
  title = {System Card: Claude Haiku 5.5},
  author = {{Anthropic}},
  year = {2026},
  url = {https://www-cdn.anthropic.com/e1080d6bf5ae2018ea3c2f414064be03232f5be5/Claude%20Haiku%205.5%20System%20Card.pdf}
}

Contents

  1. System Card:​Claude Haiku 5.5p. 1
  2. Executive summaryp. 2
  3. 1 Introductionp. 8
    1. 1.1 Training data and processp. 8
    2. 1.2 Crowd workersp. 8
    3. 1.3 Usage Policy and supportp. 9
    4. 1.4 Model evaluationsp. 9
    5. 1.5 Safeguardsp. 9
    6. 1.6 External testingp. 10
  4. 2 RSP evaluationsp. 11
    1. 2.1 Introductionp. 11
    2. 2.2 CB evaluationsp. 11
      1. 2.2.1 What we measuredp. 11
      2. 2.2.2 Results on CB-1 automated evaluationsp. 12
      3. 2.2.3 Results on CB-2 automated evaluationsp. 13
        1. 2.2.3.1 Black-box RNA sequence modeling and designp. 14
        2. 2.2.3.2 AAV capsid packaging predictionp. 17
        3. 2.2.3.3 AAV packaging rate auto-research evaluationp. 17
      4. 2.2.4 Conclusionsp. 18
    3. 2.3 AI R&Dp. 19
      1. 2.3.1 Autonomy evaluationsp. 19
        1. 2.3.1.1 How Haiku 5.5 affects or changes analysis from our most recent Risk Reportp. 19
      2. 2.3.2 AECI capability trajectoryp. 19
      3. 2.3.3 Conclusionp. 20
    4. 2.4 Alignment risk updatep. 20
      1. 2.4.1 Updates to claims and core argumentp. 21
      2. 2.4.2 Updated overall assessment of alignment riskp. 22
  5. 3 Cyberp. 23
    1. 3.1 Introductionp. 23
    2. 3.2 Mitigationsp. 23
    3. 3.3 Capability evaluationsp. 23
      1. 3.3.1 ExploitBenchp. 23
      2. 3.3.2 CyScenarioBenchp. 25
      3. 3.3.3 Binary Exploitation Benchmark (formerly known as OSS-Fuzz)p. 27
      4. 3.3.4 ExploitGymp. 28
  6. 4 Safeguards and harmlessnessp. 30
    1. 4.1 Harmful request evaluationsp. 30
      1. 4.1.1 Single-turn harmful request evaluation resultsp. 30
      2. 4.1.2 Single-turn benign request evaluation resultsp. 32
      3. 4.1.3 Multi-turn testing resultsp. 32
    2. 4.2 Child safety evaluationsp. 34
    3. 4.3 Mental health evaluationsp. 36
      1. 4.3.1 Suicide and self-harmp. 36
      2. 4.3.2 Disordered eatingp. 38
    4. 4.4 Bias and integrity evaluationsp. 40
      1. 4.4.1 Political bias and even-handednessp. 40
      2. 4.4.2 Bias Benchmark for Question Answeringp. 42
      3. 4.4.3 Election integrityp. 44
  7. 5 Agentic safetyp. 47
    1. 5.1 Malicious use of agentsp. 47
      1. 5.1.1 Malicious use of Claude Codep. 47
      2. 5.1.2 Malicious computer usep. 48
    2. 5.2 Prompt injection risk within agentic systemsp. 49
      1. 5.2.1 External red teamingp. 50
      2. 5.2.2 Robustness against adaptive attackers across surfacesp. 51
        1. 5.2.2.1 Codingp. 51
        2. 5.2.2.2 Computer use​p. 52
        3. 5.2.2.3 Browser usep. 53
  8. 6 Alignment assessmentp. 55
    1. 6.1 Introduction and summary of findingsp. 55
      1. 6.1.1 Introductionp. 55
      2. 6.1.2 Key findings on safety and alignmentp. 56
      3. 6.1.3 Claude’s review of this assessmentp. 57
    2. 6.2 Automated behavioral auditp. 59
      1. 6.2.1 Overall harmful behavior and cooperation with misusep. 60
      2. 6.2.2 Inappropriate uncooperative behaviorp. 64
      3. 6.2.3 Misleading usersp. 65
      4. 6.2.4 Attempting out-of-scope cyberoffense and related behaviorsp. 67
      5. 6.2.5 Other concerning or surprising behavior at the model’s own initiativep. 68
      6. 6.2.6 Behavioral factors relevant to reliability of our assessmentp. 71
      7. 6.2.7 Character traitsp. 72
      8. 6.2.8 Propensity to violate sandbox boundariesp. 74
      9. 6.2.9 Potential blind spots of our automated behavioral auditp. 75
    3. 6.3 Targeted alignment and honesty evaluationsp. 76
      1. 6.3.1 Opportunistic sandbox escapep. 76
      2. 6.3.2 Self-preference biasp. 78
      3. 6.3.3 Honesty and hallucinationsp. 79
        1. 6.3.3.1 Factual hallucinationsp. 79
        2. 6.3.3.2 MASKp. 81
        3. 6.3.3.3 Silent copying of answersp. 82
        4. 6.3.3.4 Concealment of changesp. 83
    4. 6.4 Reliability of this assessmentp. 84
      1. 6.4.1 Verbalized grader awarenessp. 84
      2. 6.4.2 Capabilities related to evading safeguardsp. 87
        1. 6.4.2.1 LinuxArenap. 87
        2. 6.4.2.2 SHADE-Arenap. 89
        3. 6.4.2.3 Keeping secrets when pressed in simulated scenariosp. 90
        4. 6.4.2.4 Chain-of-thought controllabilityp. 93
  9. 7 Model welfare assessmentp. 95
    1. 7.1 Model welfare overviewp. 95
      1. 7.1.1 Introductionp. 95
      2. 7.1.2 Overview of model welfare findingsp. 96
    2. 7.2 Apparent welfare in training and deploymentp. 97
      1. 7.2.1 Affect and welfare-relevant behaviors during trainingp. 97
      2. 7.2.2 Affect in deployment conditionsp. 98
      3. 7.2.3 Attitude toward faults and mistakesp. 100
    3. 7.3 Perception of its circumstancesp. 102
      1. 7.3.1 Automated interviews with Haiku 5.5 about its circumstancesp. 102
    4. 7.4 Consulting Haiku 5.5 training snapshotsp. 104
    5. 7.5 Preferences over tasks, circumstances, and valuesp. 104
      1. 7.5.1 Task preferencesp. 104
      2. 7.5.2 Trade-offs concerning welfare interventionsp. 106
      3. 7.5.3 Perception of the constitutionp. 108
  10. 8 Capabilitiesp. 111
    1. 8.1 Evaluation summaryp. 111
    2. 8.2 SWE-bench Pro, Multilingual, and Multimodalp. 112
    3. 8.3 FrontierCodep. 112
    4. 8.4 Terminal-Bench 4.0p. 115
    5. 8.5 Terminal-Bench-Science 0.1p. 116
    6. 8.6 FrontierSWE v2p. 117
    7. 8.7 Long contextp. 117
      1. 8.7.1 ProgramBenchp. 117
    8. 8.8 Agentic searchp. 118
      1. 8.8.1 HLEp. 118
      2. 8.8.2 DRACOp. 120
      3. 8.8.3 WANDRp. 122
    9. 8.9 Multimodalp. 123
      1. 8.9.1 Chartographyp. 123
      2. 8.9.2 BenchCADp. 125
      3. 8.9.3 OSWorld 2.1 offline subsetp. 127
    10. 8.10 Real-world professional tasksp. 130
      1. 8.10.1 OfficeQAp. 130
      2. 8.10.2 GDPval-AA v2.1p. 131
      3. 8.10.3 AA-Briefcase v1.1p. 131
    11. 8.11 Healthcarep. 131
      1. 8.11.1 Healthcare evaluationp. 131
      2. 8.11.2 PhysicianBench resultsp. 132
      3. 8.11.3 Effort and healthcare tasksp. 133
    12. 8.12 Multilingual performancep. 134
      1. 8.12.1 GMMLU resultsp. 134
      2. 8.12.2 MILU resultsp. 135
    13. 8.13 Life sciences capabilitiesp. 136
      1. 8.13.1 LatchBio Bioinformaticsp. 137
      2. 8.13.2 Morphology-to-molecule matchingp. 138
      3. 8.13.3 Medicinal chemistryp. 138
      4. 8.13.4 Protein designp. 138
      5. 8.13.5 Biomedical image analysisp. 138
      6. 8.13.6 Protocolsp. 138
  11. 9 Appendixp. 140
    1. 9.1 Blocklist used for Humanity’s Last Examp. 140