GitHub secret scanning now detects Anthropic service and user API keys and includes both detectors in push protection by default. Repositories with secret scanning enabled, including free public repositories, automatically block commits containing these key types.
Why it matters: Model credentials can authorize costly or sensitive API use. Blocking supported Anthropic keys before they enter Git history reduces an immediate leakage path, though it does not find every credential or replace rotation after exposure.
Anthropic published a revised Usage Policy effective 12 November 2026. It consolidates deceptive-campaign rules, narrows election language, clarifies weapons and surveillance restrictions, preserves human-review and disclosure requirements for high-risk decisions, and adds operator-observation, emergency-stop and safe-disconnect expectations for autonomous physical action.
Why it matters: The policy turns agent oversight and fail-safe behavior into explicit contractual requirements and changes how political, physical and consequential workflows should be reviewed before the effective date.