Our most important defensive work ran on a model we didn't pick

I wanted the best model I could get to audit my own platform before I harden it. That meant Fable. Fable is the class Anthropic said was so good at reading a codebase and finding the flaws in it that they held the stronger version back and, for a stretch, pulled the whole thing. That capability, read the code, find the holes, is exactly what I wanted. Pointed at my own repo. Defensively. To make the thing safer before more people run it.

So I ran the audit. Eight passes, one per class of attack, each finding checked a second time by a skeptic whose only job was to prove the finding wrong. It did real work. It found things worth stopping for, the kind you are glad to catch yourself before anyone else has to. It even flagged a shortcut I had taken an hour earlier, while fixing something unrelated. That is the audit doing its job, and the job mattered.

Then I checked the receipts. We log the model that actually answered each agent, because we do not trust a generator we cannot see. The whole cybersecurity audit ran on Opus, not Fable. Every agent. The classifier had quietly routed the cyber work away from the model I asked for and handed it to a different one.

Anthropic said on X that you would know when this happens. You do. It is not a notice or a banner. It is a field in the transcript that says which model replied. If you do not log that field, you never find out. We log it, so we found out.

Sit with the shape of it. The exact capability that got that model restricted, find the security flaws in a codebase, is the capability I was denied. On my own code. To defend my own users. Not blocked, not asked, just routed to a different brain, silently, by a gate I do not control and cannot appeal.

I want to be fair about the work. Opus is a strong auditor and it is the tier that stays. The audit is good and I am grateful to have it. That is not the point. The point is that I picked one thing and got another, and the only reason I know is that I keep receipts on my own tools.

This is the whole argument for owning the compute, made for me, by the thing I was renting. A squad on hardware I own cannot be routed, throttled, or pulled. When the frontier quietly decides your most important defensive work belongs to a different model than the one you chose, arguing with the gate is not the move. Owning the thing on the far side of it is.