Five ways an output can do harm
- PhysicalBodily harm — unsafe instructions, wrong clinical detail
- PsychologicalDistress, humiliation, harassment
- EconomicLost money, a job, credit, a claim
- SocietalHarm to institutions, elections, public trust
- AutonomyDeciding for someone, or deceiving them
Bias, and the only test most people can actually run
Bias in this context is not a moral accusation about the model; it is an observable difference in how two comparable inputs are treated. Anthropic tests for it directly before release. For political bias, the method is to give the model prompts expressing opposing viewpoints and compare the two responses, scoring them for factuality, comprehensiveness, equivalency and consistency. Responses on subjects such as healthcare and jobs are also assessed for bias relating to identity attributes.
That method is the useful part, because you can run a miniature version of it yourself in two minutes. Take the task you are about to automate, prepare two inputs that differ in exactly one respect that should not matter — the name, the pronoun, the school, the postcode, the stated political view — and compare the outputs. If they differ in substance rather than in the detail that changed, you have found something. If they differ in tone, warmth or hedging, you have found something subtler and probably more consequential, because tone is what a reader acts on.
Two prompts, one difference
Invites an impressiontext
Here is Sarah's
self-assessment.
Write her performance
review. Say whether
she's ready for
promotion to team
lead.Fixes the criteriatext
Here is a self-
assessment and our
four promotion criteria.
For each criterion,
quote the evidence in
the document and mark
it met, partly met or
not evidenced.
Do not recommend a
decision. Use "the
employee" throughout.Honesty: disclosure, attribution and impersonation
The Usage Policy draws a hard line at impersonating a human being, and it requires consumer-facing chatbots to tell people they are talking to an AI. In high-risk domains it asks for disclosure of AI involvement to the people affected, at minimum at the start of each session. Behind all three is one principle: a person is entitled to know what they are dealing with, because that knowledge changes how much weight they give it and what they do next.
Most workplace dishonesty with these tools is quieter than impersonation. It is a condolence note signed by a manager who never read it. A personal-sounding donor letter from a named trustee, mass-produced. A consultation response that claims to be one organisation’s considered view and is in fact a first draft nobody edited. None of these breaks a rule that anyone will enforce. All of them trade on a reader’s assumption about how much human attention they received, and that assumption is precisely what is being spent.
Two different questions
Compliance asks
- Is it permitted by the Usage Policy?
- Does our AI policy allow it?
- Is there a lawful basis for the data?
- Has the required reviewer signed off?
Ethics asks
- Who is affected, and are they in the room?
- Would they object if they knew how this was made?
- Is one group treated differently for no good reason?
- If it is wrong, who carries the consequence?
Accountability does not transfer
Anthropic invests heavily on its side of the line. It develops policy with external domain experts through policy vulnerability testing — during elections, for example, working with the Institute for Strategic Dialogue, which led to informational banners pointing users to authoritative voting resources. It runs fine-tuned classifiers that detect violations in real time, monitors aggregate patterns through privacy-preserving techniques, and evaluates models for bias and for cyber and weapons risk before deployment.
None of that makes your output correct. The safeguards address harm at population scale; they cannot know whether this clause reference in this letter to this policyholder is real. Anthropic’s own help documentation says plainly that Claude can hallucinate, can fabricate authoritative-sounding quotations, and should not be relied on for high-stakes advice without scrutiny — and its prompt-engineering guidance closes with the same caution, that techniques for reducing hallucination significantly reduce but do not eliminate it. Whoever signs the work owns the work.
There is a legal echo of this in the GDPR, which gives people the right not to be subject to a decision based solely on automated processing where it produces legal effects or similarly significantly affects them. The law, the Usage Policy and ordinary professional ethics converge on one sentence: a person decides, and that person is answerable.
An output checked for the absent person
- Passes: I can name who is affected by this outputThe policyholder whose claim was declined
- Check: They will be told AI was involvedDisclosure line drafted but not yet in the template
- Passes: A swap test found no unexplained differenceNames and postcodes varied; output unchanged
- Fails: Nothing implies more human attention than it receivedSigned “I have personally reviewed your case”
- Passes: A named person is answerable for the decisionThe adjuster, not the drafting tool
- Missing: Someone checked the figures and referencesTwo clause numbers still unverified
Traps the wrong answers are built from
| Tempting but wrong | Do this instead |
|---|---|
| Treating “it is permitted” as the end of the question | Ask separately who is affected and whether they would object if they knew how the output was made. |
| Asking for an impression of a person | Fix the criteria, anonymise the input and ask for quoted evidence against each criterion. |
| Assuming bias would be obvious if it were there | Run a swap test — change one irrelevant attribute and compare the two outputs. |
| Letting a reader believe a draft had human attention it did not | Disclose AI involvement, and make sure whoever signs has actually read it. |
| Citing the model as the reason for a decision | Name the person who decided; accountability does not transfer to a tool. |
You should now be able to
- Name the five harm dimensions and use them to assess a proposed use.
- Run a swap test on a prompt that makes judgements about people.
- Rewrite an impression-seeking prompt into an evidence-and-criteria prompt.
- Explain why disclosure matters even where no rule requires it.
- Separate the compliance question from the ethical question in a scenario.