Leaked Claude Fable 5.1 Prompt Reveals Scale of Modern AI Agent Infrastructure

·1 views

A GitHub repository published a file purported to be a runtime system prompt for Anthropic's Claude Fable 5.1, containing over 275,000 characters of instructions. Despite headlines claiming a hack, there is no public evidence that Anthropic's servers, model weights, or customer data were compromised. The file appears to be a third-party extraction or reconstruction of runtime instructions, covering tool use, web search, memory rules, safety policies, and content behaviour. Early analysis identified schemas for roughly 46 tools, though Anthropic has not confirmed these figures or verified the document's completeness. For developers, the file's chief value lies in illustrating how modern AI agents are built through layered runtime orchestration rather than a single system message.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why remote desktop tools are the wrong fix for in-room screen sharing

Remote desktop tools like AnyDesk and TeamViewer are routinely used in meeting rooms when an HDMI connection fails, but they were designed to control machines from a distance — not to share content with people standing nearby. Their core features, such as NAT traversal, relay servers, and one-to-one control sessions, solve problems that simply do not exist when everyone is in the same room. The mirroring model also falls short in group settings, where multiple people need to view a shared display rather than take turns controlling a single machine. Alternatives better suited to local screen sharing include Apple's built-in Sidecar for Mac and iPad users, and the open-source tool Deskreen, which streams a screen or window to any browser on the local network without requiring an account. Choosing the right tool comes down to recognising that in-room display needs and remote access needs are fundamentally different problems with different solutions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

KXApp Lets Developers Build iOS Apps on Windows Without Installing Xcode

iOS development has traditionally required a Mac running Xcode, a setup that demands significant storage and restricts developers using Windows machines. A developer explored several alternatives — including VS Code with remote Mac compilation, CI platforms like Codemagic, and the now-discontinued AppCode — but found each had meaningful limitations for day-to-day coding. KXApp, a newer IDE, bundles its own iOS compilation and signing toolchain, removing the dependency on Xcode entirely and allowing real-device deployment in fewer steps. Built on a VS Code editor layer, it supports Swift, Objective-C, and Flutter projects, and handles incremental syncing to connected iPhones after code changes. Xcode is still considered superior for complex configurations, Storyboard editing, and deep performance analysis with Instruments, but KXApp is positioned as a lighter alternative for common development workflows.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ninth Circuit Rules Amazon's CFAA Claims Weak Against AI Browser Acting for Users

Amazon filed a lawsuit in November 2025 against AI company Perplexity over its Comet browser, citing federal and California computer fraud statutes. A district court initially granted a preliminary injunction in March 2026, but the Ninth Circuit vacated it in August 2026. The appeals court found that because Perplexity's browser was operated by Amazon's own signed-in customers using software they had chosen, it did not constitute unauthorised access under computer-misuse law. The ruling is the first federal appellate decision on whether AI agents acting on behalf of users may access online platforms, though the panel stressed it was ruling on the specific record rather than setting broad doctrine. Contract, trademark, and state-law claims were not addressed, and the court noted that different facts — such as agents operating at large scale without authentication — could yield a different outcome.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Apply Threat Modeling Principles to LLM Tool-Calling Systems

As large language models gain the ability to call external tools, security researchers are urging developers to treat the context window as an untrusted input and apply least-privilege design principles. Each tool exposed to a model should be evaluated for what data it reads, what it modifies, and who has authorized its use. Credentials should be scoped per invocation rather than per deployment to prevent an agent from accumulating the permissions of all users it serves. Irreversible actions, such as deleting production data, should require out-of-band confirmation that the model itself cannot generate. Full tool-call payloads, not model-generated summaries, should be logged to ensure reliable audit trails during investigations.

0 comments Read more at DEV Community