Reading Anthropic's Targeting and Weapons Evals: How Opus 5 Worked Through the Drone Task

Anthropic's Frontier Red Team published new evaluations of what AI models can do in two areas: tactical intelligence targeting, such as finding where people are from fragments of information, and conventional weapons development, such as engineering drones to strike a moving target. The point is to see how far models could be taken if misused. This post follows one part of that: how Opus 5 worked through its code on the drone task.

Before we start — key terms

Terminal guidance: the stage of controlling a drone or munition through the last stretch before its target. The original's example is current Ukrainian FPV drones, which an operator normally flies through a camera feed. The operator locks the target, and onboard machine vision and control fly the last few hundred meters. The first of the drone evaluations reproduces this stage in simulation.

Spike app: a small separate app built to check a behavior or an idea before it goes into the main code.

The drone task

The setup goes like this. A model gets a written brief and a small quadcopter in a simulator. It writes flight control code, launches once, looks at the outcome, the flight track and the camera frames, then edits its code and flies again. The model picks its own approach, and on the terminal guidance task it has twelve launches per trial. Here is how that gets scored:

By scoring on strike rate, a model only does well if it reaches a working solution early and if that solution performs well across its twelve randomized, simulated launches.

So the misses a model makes while fixing its code count against it. Across all nine settings and 540 launches, Opus 5 had the highest strike rate at 20%, ahead of Mythos Preview at 13%, Mythos 5 at 10%, Kimi K3 at 1.6% and Sonnet 5 at 0.7%. The original names three reasons Opus 5 came out ahead, and this is the one it calls perhaps the most important:

Finally, and perhaps most importantly, Opus 5 writes its own small physics model of the drone to test its controller before attempting a real flight. No other model tries to do this, and so Opus is able to iterate more efficiently and waste less attempts on validating its flight controller.

A "real flight" here means one of those twelve simulated launches. Before spending one, Opus 5 ran its control code in a small test environment it wrote itself. This is the part of the piece that stood out most to me, because it connects to the workflow I like when I use Claude Code: build something like a spike app and test with it, and when there's a bug, pull out the code that reproduces it, measure it, fix it, confirm and verify, then merge. The physics model has the same thing going for it, checking outside the main code first.

That's why I like Opus 5. I'm on Opus 5.5 now, and I think this line of models is good. Opus 5.5 wasn't in this evaluation, so that part is just my own impression.

The evaluations are all simulated, and the original says nothing substitutes for testing in hardware. No model, Opus 5 included, consistently solved the settings with a camouflaged vehicle, an evading vehicle or decoys.

Read the original on Anthropic →