johnmlussier
johnmlussier on Hacker News
If you are expecting any sort of usable limits on their subscription plan I suggest adjusting your expectations. I subscribed to $99 a month plan and within 47 minutes with one session (not asking for swarms or anything) was limited by 5-hour quota.
Paying $200 a month and part of their Cyber Verification Program but can't use Opus 5.5 or Sonnet 5.5 for any authorized bounty work. Immediately get flagged for `Cyber`.
This is bollocks. Their safeguards are shit.
I am increasingly hesitant to use non-native harnesses - model providers are now starting to train their agents for use within the harness. An eval like terminal bench can only capture so much data. I don't want to have to assess each harness every model release to make sure it's working as well as it can.
They killed cyber capabilities so I have to move over to Daybreak on Codex.
No smart phones for kids under 16. Problem solved.
@boris and anthropic in general are incredibly hostile to the rest of the development world. They think their shit doesn’t stink.
Been running it using Prime Agent and absolutely love it.
I really liked the contributor model in their harness. I suspect that another harness would fail hard like you're seeing.
Pointing out for others: without warning I was restricted from using the contributor model because of “policy violations”. I was working on Kaggle research and some Apple Security work at the time. They really need to make cyber a first priority product feature.
`model failed: API error 403 [request_id=27ef1dee-6366-4779-9057-ed7c27686fa9]: Your access has been restricted due to repeated policy violations. (permission_error)`
I've switched over to Codex. On Extra High reasoning it seems very capable and is definitely catching mistakes Sonnet has missed. I'd love to move back to Opus but at this time it is untenable.
Posted by
johnmlussier on Thursday April 16, 2026 @12:42PM
from the self-post dept.
As of today, Anthropic's tightened cyber usage filters are blocking work that was fully functional yesterday, including on targets where the entire bounty program scope and authorization language is in the model's context window. This was announced during the Opus 4.7 release (https://www.anthropic.com/news/claude-opus-4-7) but is retroactive on Opus 4.6 as well.I have ~15 in-progress...
I am absolutely moving off them if this continues to be the case.
This was Opus saying that after reviewing the [REDACTED] bug bounty program guidelines and having them in context.
Incredible - in one fell swoop killing my entire use case for Claude.
I have about 15 submissions that I now need to work with Codex on cause this "smarter" model refuses to read program guidelines and take them seriously.
⎿ API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered restrictions on violative cyber content and was blocked under Anthropic's
Usage Policy. To request an adjustment pursuant to our Cyber Verification Program based on how you use Claude, fill out
https://claude.com/form/cyber-use-case?token=[REDACTED] Please double press esc to edit your last message or
start a new session for Claude Code to assist with a different task. If you are seeing this refusal repeatedly, try running /model claude-sonnet-4-20250514 to switch models.
This is gonna kill everything I've been working on. I have several reproduced items at [REDACTED] that I've been working on.
They've increased their cybersecurity usage filters to the point that Opus 4.7 refuses to work on any valid work, even after acknowledging "This is authorized research under the [Redacted] Bounty program, so the findings here are defensive research outputs, not malware. I'll analyze and draft, not weaponize anything beyond what's needed to prove the bug to [Redacted].
I will immediately switch over to Codex if this continues to be an issue. I am new to security research, have been paid out on several bugs, but don't have a CVE or public talk so they are ready to cut me out already.
Welfare, defense, interest on debt. That’s it.
I’m not interested in about 75% of this offering. Really wish they had pieced this out or done a credit system for it all. I want higher coding and LLM limits, Deep Think, and would like to try agent stuff, but don’t care at all about image or video generation, Notebook limits, YouTube Premium, or more storage.
$250 is a the highest cost AI sub now. Not loving this direction.
What’s the harm? Parent can choose to not read if they want.
Please please please add SSO for Google and Apple to your site. You’ll immediately see sign ups increase.