- DeepSeek V3 (China, late 2024) was reportedly distilled from GPT-4 and Claude 3, per Anthropic's public statement at the time and a subsequent analysis by Stanford's Center for Research on Foundation Models.
- Qwen 3 released by Alibaba in 2025 achieved strong coding performance despite a smaller training budget; Anthropic's complaint focused on Qwen's use of Claude outputs as fine-tuning data, per the December 2025 complaint filed with the US Trade Representative.
- Kimi K2 (Moonshot AI, 2026) is a long-context flagship directly competing with Claude Mythos; Anthropic has not publicly alleged distillation by Moonshot but the competitive overlap is the closest in the industry.
- Mistral Large 3 from Mistral in 2026 ships open weights with Claude-class performance on standard benchmarks. Mistral's training data is not publicly disclosed, and Anthropic has not alleged distillation by Mistral, though the competitive overlap is the closest in the European open-weight ecosystem.
Anti-distillation is Anthropic's competitive defence, per Fortune's 2026 coverage. The alternative (legal action under the terms of service) has been slow and difficult to enforce across jurisdictions, particularly when the alleged distillers are outside US legal reach.
Enterprise impact
For legitimate enterprise users, the September 2 changes are invisible. Output quality, latency, and pricing are unchanged for normal use cases including chat, RAG, summarisation, code generation, and tool use. The only observable change is in the API terms of service, which now explicitly reserve the right to throttle accounts that exhibit distillation patterns.
For users training custom models on Claude outputs, the impact is significant. Anthropic's internal benchmarks show 10 to 25% quality degradation on models trained on Claude outputs post-September 2, per the Anthropic September 2 2026 technical disclosure. Distillation-based fine-tunes (QLoRA on Claude responses) will see significantly worse results because the perturbation layer compounds during gradient updates. Synthetic-data generation pipelines that use Claude to bootstrap training data will produce lower-quality training data, which then degrades the downstream fine-tune.
The terms-of-service reservation is also worth noting. Anthropic can throttle or refuse service to any account that exhibits distillation patterns, even if the account is legitimate. The detection is heuristic, and false positives are possible, per the Anthropic documentation. Enterprise users running high-volume batch jobs should review the new terms before scaling up.
Industries most affected by the September 2 changes are legal-tech (high-volume document analysis), customer-support analytics (synthetic training data from chat logs), and code-generation startups (fine-tunes on Claude outputs for product differentiation). Each of these workflows either explicitly distills on Claude outputs or builds synthetic datasets that depend on Claude-quality generation. Per industry analysts tracking the foundation-model ecosystem, the September 2 release will reshape the build-vs-buy calculus for any product that relies on a fine-tune over a frontier model.
How to choose between Fable, Mythos 5.1, and the rest of the family
The Claude 4.5 family now has five production variants. The right pick depends on the workload:
- Claude Opus 4.5 (3.00 dollars per million input tokens) is the flagship reasoning model. Use it for hard analysis, math, multi-step planning, and any workload where quality matters more than cost.
- Claude Sonnet 4.5 (1.50 dollars per million input tokens) is the balanced default. Use it for most production workloads including chat, RAG, summarisation, and code generation.
- Claude Haiku 4.5 (0.40 dollars per million input tokens) is the fast and cheap option. Use it for high-volume, latency-sensitive workloads where Sonnet 4.5 is too slow or too expensive.
- Claude Fable (2.50 dollars per million input tokens) is the creative writing specialist. Use it only if the workload is specifically creative writing, narrative content, or long-form marketing. Fable underperforms Sonnet 4.5 on most non-creative tasks.
- Claude Mythos 5.1 (4.00 dollars per million input tokens) is the long-context reasoning specialist. Use it only if the workload requires consistent quality over 1 million-token contexts. For shorter contexts, Sonnet 4.5 is faster and cheaper.
For most enterprise use cases, Sonnet 4.5 remains the right default. Fable is the right pick only if the workload is specifically creative writing. Mythos 5.1 is the right pick only if the workload requires consistent quality over 1 million-token contexts. Haiku is the right pick for high-volume latency-sensitive workloads. Opus is the right pick for hard reasoning where cost is secondary to quality.
Competitive context
Other frontier labs are responding differently to the same distillation pressure:
- OpenAI prohibits distillation in its terms of service. Technical watermarking is optional and not widely deployed across the GPT-5 family. Most of OpenAI's protection is contractual, per OpenAI's 2026 terms-of-service update.
- Google prohibits distillation in its terms of service and ships no public anti-distillation mechanism. Gemini 3 Pro relies entirely on the terms-of-service route. Google's position is that distillation is a contractual issue, not a technical one.
- Anthropic is the first frontier lab to ship technical anti-distillation at the model layer, per Fortune's 2026 reporting. The technical approach is more enforceable than contractual terms across jurisdictions, particularly in countries where US contract law is not directly applicable.
Expect OpenAI and Google to ship similar technical anti-distillation mechanisms by mid-2027, per industry analysts tracking the frontier-lab competitive landscape. The September 2 release is likely the first of a broader 2026-2027 industry shift toward model-layer protection. Labs that ship technical protection earlier will have a 6 to 12 month competitive advantage in slowing distillation-based catch-up.
The longer-term question is whether technical anti-distillation will slow frontier-model catch-up at all, or just force competitors to invest more in compute rather than data. Early evidence from the September 2 release is mixed: some distillation pipelines are degrading as expected, but the most sophisticated distillation efforts are adapting by using more diverse training sources and longer fine-tune schedules. Per the September 2 whitepaper, the three layers are an opening move, not a complete defence. Anthropic plans to update the mechanisms quarterly based on observed bypass patterns, which suggests the technical arms race between frontier labs and distillation pipelines is now a continuous game of measure and countermeasure.
Resources and next steps
- Anthropic news and release notes: anthropic.com/news
- Fortune's September 2 2026 coverage of the anti-distillation release
- FTC inquiry into AI training practices: ftc.gov
- Anthropic 2026 pricing page for the full model lineup: anthropic.com/pricing
- Anthropic September 2 2026 technical disclosure on the three anti-distillation layers
Fazlur Rahman
