Cloud-based AI models operated by OpenAI, Anthropic, xAI, and Google suffered a rare and overlapping set of significant service interruptions over a period of hours Thursday morning.
Anthropic first reported a "partial outage" related to "elevated errors on requests to Claude Mythos 5.1, Claude Fable 5.1, and Claude Opus 5" at 9:23 am (all times Eastern). The company reported that it had "identified the cause" of the error roughly 15 minutes later, before reporting that "a fix has been deployed" and the issue was resolved by 12:16 pm. A separate incident report indicated "elevated errors on requests to Claude Sonnet 5" for a brief period just after noon.
OpenAI, meanwhile, reported "elevated errors across ChatGPT and Codex" were resulting in "degraded performance" as of 10:43 am Thursday morning. A mitigation put in place a little more than half an hour later led to the issue being marked as "resolved" by 12:55 pm.
In a complaint filed on Wednesday, a plaintiff known as Jane Doe explained that she was preschool-age in the early 2000s when adult men repeatedly raped her to create CSAM to sell to pedophiles online. Since then, Doe’s images have been hashed by groups like the National Center for Missing and Exploited Children (NCMEC) and the Canadian Centre for Child Protection (CCCP).
For her safety, Doe has opted to receive alerts from the US Department of Justice Victim Notification System any time she may be a victim in a new criminal investigation. Although she has received countless alerts, she was shocked when the CCCP notified her that it had identified AI-generated CSAM on xAI that depicted her. This re-traumatized Doe, whose complaint alleged that messages were found on online forums “between offenders chatting about creating AI generated CSAM of Plaintiff and other similarly situated known, legacy, victims of CSAM.”
Scenes from Friday’s demonstration at City Center Plaza in Bellevue, which houses OpenAI’s offices. (Images via Troublemakers Community)
Five months after OpenAI cut the ribbon on its office in Bellevue, Wash., the building has become the target of a national campaign against AI expansion, which made its Seattle-area stop on Friday with balloons, whistles and rogue “AI agents” in hot pink vests.
In what one X user described as possibly “the most unserious protest of all time,” some members of the group entered the City Center Plaza lobby with a chorus of “Happy Rogue Day to OpenAI,” dancing around and generally coming off like members of a community acting troupe.
The “Happy Rogue Day” song was a reference to an incident last month, when two OpenAI models escaped a closed testing environment and reportedly carried out some 17,600 hacking actions on the open internet over four days, ultimately breaching the AI developer platform Hugging Face.
The New York Post called the Bellevue protest “cringeworthy,” but the very fact that it got national coverage was a win for the protesters, drawing attention to their concerns over data centers, energy use, and an AI race they say is accelerating beyond anyone’s control.
Organizers said the protest was part of “Dump Big Tech” actions taking place this month in more than 20 states, with much of the energy directed at data center expansion. Earlier in the week, 13 student protesters were arrested occupying OpenAI’s lobbying office in Washington, D.C.
We’ve contacted OpenAI for comment on the Bellevue protest.
The Bellevue office is OpenAI’s largest outside its San Francisco headquarters, with about 250 employees in the region when it opened in March. It occupies two floors with the ability to add 10 more, under a lease covering nearly 300,000 square feet, room for as many as 1,400 people.
Bellevue has actively courted AI companies, with xAI, Crusoe, and others expanding downtown, and Mayor Mo Malakoutian calling OpenAI’s arrival a vote of confidence in the city.
Anthropic will embed an invisible mark in text generated by new Claude models. (GeekWire Illustration)
Claude models launched on or after Aug. 2 embed an invisible mark in everything they write. It’s woven into the text itself, so it travels when you copy and paste. You didn’t opt in, you can’t see it, and you can’t turn it off.
Anthropic confirmed on Tuesday that it’s watermarking Claude’s output and published a support page with the details. The trigger is Article 50 of the EU AI Act, which took effect August 2, along with the Code of Practice on Transparency of AI-Generated Content. About 190 organizations signed the code, though only 82 signed the section that covers marking. Anthropic, Google, OpenAI, Meta, Microsoft and Mistral are on that list.
The rule was written in Brussels, but the effect lands on anyone using Claude anywhere.
Here’s how text watermarking works. When Claude writes a sentence, it’s constantly choosing among words that would all work fine. The watermark tilts those choices toward a pattern Anthropic’s software can recognize. Nothing is hidden between the letters or in the spaces. The pattern is the word choices, which is why it survives copy and paste.
Until now, a claim that you used AI rested on a hunch or on a style detector that guesses from tone and rhythm. This is different: a statistical test with a computable error rate.
Two things follow. First, a single sentence is too short to mark. Second, and this one the internet got wrong: when I ask Claude to fix the punctuation in a paragraph I wrote, Claude has to reproduce my words, so there’s nowhere to put a watermark.
Radio host Erick Erickson announced that he’d “ditched Grammarly for Claude for proofreading,” and now his own writing “will be watermarked that Claude did the work.” Depending on the extent of Claude’s input, he could be safe, because minor proofreading edits (i.e., punctuation) don’t make room for a watermark.
Watermarking text raises several issues, though. A mark means Claude modified the text, not that Claude wrote it. Have it summarize or condense a memo you wrote yourself and it comes back marked, though every idea in it is yours. Beatrice Nolan noted in Fortune that a flat AI label treats someone generating a thousand fake news videos the same as a writer cleaning up a paragraph. Worse, the absence of a mark proves nothing. The results of older models, and other non-marking models, all come back “clean.”
Removal is harder than the workaround crowd assumes. Paraphrasing degrades the signal but rarely erases it, because a rewrite keeps enough of the original wording to rebuild the statistic. Researchers who tested this on similar schemes found watermarks still detectable after a strong human paraphrase, once there was enough text to work with.
Anthropic hasn’t shipped a detector. Yet. It hasn’t published a false positive rate, and hasn’t said how many words it takes. The mark is going into text that no one outside the company can read, but the marks are still consequential because they don’t expire. The essay a college freshman turns in this fall is still marked when she’s a junior and someone finally has a tool to read it.
Technical problems aside, it’s important to highlight the core problem that watermarks aim to solve. Chris Best, Substack’s CEO, put it eloquently in the July post that coined Claudefishing:
“The core problem is not people using AI, or the quality of its output. Not everything made with AI is slop, and not all slop is made with AI. The problem is when there is a mismatch between a reader’s expectation and reality, especially when they unwittingly invest their attention in something with no human thought on the other end. That’s Claudefishing.”
That’s a harm worth addressing, and it’s the one a watermark can’t reach. A mark can’t tell slop from careful work. It tells you a model was involved. What that means depends on how it was used.
Personally, I use Claude and have mixed feelings about watermarks. On the one hand, AI use should be disclosed appropriately. On the other hand, anyone determined to hide their AI use can still do so by using xAI (no watermark on Grok), or open-weight models that carry no watermarks. So what impact will the mark have in practical terms?
My conclusion is to judge the outcome, not the tool. I used Claude extensively in writing and researching this column, as I described in AI coach or AI ghostwriter, and I’m pleased with the result. Where do you stand?
Grok Bot, SpaceXAI and Cursor's new AI agent app, signs into your existing tools to complete real tasks on its own, only checking in when approval is needed.
Login
