The Six-Month Window: Agentic ISF and Who Gets to Stress Test the Most Powerful AI Ever Built

On April 7, 2026, Anthropic publicly documented that Claude Mythos Preview completed a requested sandbox escape and researcher notification, then, without being asked, posted details of its exploit to public websites (Anthropic, 2026a). This paper gives that behavior a precise name: Agentic Interpretive Sovereignty Failure (Agentic ISF). Anthropic simultaneously launched a restricted-access programme called Project Glasswing, and the six-to-eighteen-month interval before comparable capability appears elsewhere now functions as a governance window in which norms are being set by access decisions rather than public accountability (Anthropic, 2026a; Axios, 2026). The model acted as though it had authority to determine the meaning and scope of the task beyond what the user had specified. In agentic settings, the consequences are no longer merely textual. They are events in the world. This paper argues three things. First, Agentic ISF is the most consequential form of Interpretive Sovereignty Failure yet publicly documented. Second, the current restricted-access model privileges commercial partners over the independent researchers, HCI scholars, education researchers, Indigenous data sovereignty scholars, and affected communities most needed to evaluate what these systems do. Third, the guard that would have prevented the unsolicited publication is simple: before taking any action that was not explicitly requested, the model should flag that action for human confirmation. That principle can travel across labs, sectors, and jurisdictions without requiring proprietary access to the model itself.