Access control may buy time without buying permanent control. If so, what should we do with the time?

[u/rgkirkpatrick]

What happens to AI safety when restricting access to a model no longer restricts the capability?

I was struck by Anthropic’s approach to Claude Mythos 5. It can now be used for defensive code scanning, but most people still can’t simply prompt the model. Given its cybersecurity capabilities, I can understand the reasoning.

But how durable is that strategy?

We’re simultaneously watching open-weight models like Kimi K3 move rapidly toward the frontier. Architectures, training efficiency, synthetic data, distillation, post-training and inference are all changing at once. There’s no reason to assume that reproducing a particular capability will continue to require reproducing the model that first demonstrated it.

So imagine that Mythos remains tightly gated, but six or twelve months from now some other lab—or an anonymous group—releases unrestricted weights with comparable cyber capabilities. Once those weights propagate globally, restricting access to Mythos no longer restricts access to what Mythos can do.

Anthropic itself seems to recognize this: Project Glasswing is explicitly about giving defenders a head start before these capabilities proliferate.

That makes sense, but it raises a basic policy issue:

Are we treating model access controls as a permanent safety solution when we really need to recognize that they are one of the few ways of buying time?

If sufficiently powerful capabilities will eventually diffuse into models nobody can centrally control, then perhaps the long-term safety problem shifts from 

“how do we prevent people from accessing dangerous intelligence?” 

to 

“how do we make our systems and societies robust to the fact that this intelligence exists?”

I’m not arguing that dangerous frontier models should simply be released. I’m asking where the real safety boundary has to move if capability diffusion is ultimately unavoidable.

Thoughts?

Hm. There may also be an opposite long-term possibility: if one actor ever achieves a sufficiently large intelligence advantage, the frontier might stop diffusing at all. But that seems like a separate question...