· Jul 9, 2026
Shmuel Berman, Michael Ilie, Jia Deng, and Daniel Freeman argue in Anthropic that robot access matters
Markdown · JSON · Original source
published this research on July 9, 2026. Shmuel Berman, Michael Ilie, Jia Deng, and Daniel Freeman report tests of language models controlling simulated and physical robots. They find that performance depends heavily on how a model is connected to a robot: models mostly fail when directly controlling the joints, but can complete some real navigation and manipulation tasks when supervising a controller or using orientation tools. The authors argue that this matters for safety because a model can affect the physical world without controlling a robot’s joints itself; access to a capable controller may be enough. In their tests, pretrained policies raised task performance, but models still struggled with spatial memory, long plans and reliable task completion. In one physical-robot run, a model misjudged a trash can as out of the way; the robot struck and dragged it before the team stopped it. The authors conclude that evaluations and deployments should treat access level as part of the system. They call for clearer limits on physical access, so a system can affect some objects while being blocked from others. Real-world trials were limited, and how well the results carry over to other robots, tasks and access controls remains unknown.
Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.
Original source
· Article
Source details
Original source date: Jul 9, 2026 (2026-07-09T00:00:00.000Z).
Date basis: Date stated on the publisher’s page.
Added to Escape Meridian: 2026-11-07T04:33:24.959Z. First observed: 2026-10-20T02:47:20.265Z. Retrieved: 2026-10-27T21:37:20.343Z.
Referenced by
Recorded citations and public file attachments. A reference alone does not establish agreement or influence.
No public references recorded here yet.
Limits
Text as retrieved on October 27, 2026; originally published July 9, 2026. The authors describe limited real-world trials; those results do not establish how performance generalizes beyond the tested robots and tasks. The reported results concern the authors’ test suite and selected control interfaces; they do not establish performance for every robot or deployment.
Open question
How well would these findings carry over to robots, tasks and access controls beyond those tested?
Source-stated
The authors report that a model’s robotics capability depends substantially on its control interface; direct joint control mostly fails, while higher-level assistance can support some real tasks.
When they must drive the joints themselves they mostly fail. But when they supervise a pretrained controller or use simple orientation tools, they can complete real navigation and manipulation tasks.
Source-stated
The authors say access to a capable controller matters for safety because a model can affect the physical world without controlling robot joints directly.
a model does not need to drive joints itself to act capably in the world, only access to a competent controller.
Source-stated
In a physical-robot run, the authors say the model misjudged a trash can and the robot struck and dragged it before the team stopped it.
The trash can was in fact directly in front of the dog. It walked into it, got a leg caught, and dragged the can for a couple of meters before we stopped it.
Source-stated
The authors conclude that evaluations and deployments should account for system access, and call for clearer limits on physical access.
Evaluations and deployments need to treat access level as a core part of the system, because small changes in tools or control can produce large changes in capability.
Source-stated
The authors say real-world explorations were limited in trial count and generally aligned with simulation while revealing failure cases.
Although we could not achieve high N count trials due to the serial nature of work in the real world, our explorations generally aligned with our simulated findings
Source and contributor context
Anthropic · Publisher
The publisher is identified here. No individual author has been inferred.
Source media
Media retrieval status: unchecked.
Terms and references
Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.
Pre-training
A model's initial training on a large dataset, before further adaptation for particular uses.
Anthropic
Anthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Editorial provenance
Version 1. Publication ID: c5fcfad6-92c4-9ba7-c6dc-167392f0f84e.
Prepared by openai/gpt-6-luna; grounding review by anthropic/claude-opus-5.5.
Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-07T04:30:23.649Z. This checks fidelity to the source, not whether its claims are independently true.
Editorial selection: accept; reasons: bridge_admitted_by_model.
Observation: 0e3293813992a995d4c6f5baa718f5e442423b6bd046ffdacd6e27a9ab1e52d3. Source text hash: 492785ba29a8caf5643d7958d25db11a940c7459885a11bba2d8de77b7e5729c.
Revision and source-check history
Version 1 · 2026-11-07T04:33:24.959Z
Shmuel Berman, Michael Ilie, Jia Deng, and Daniel Freeman argue in Anthropic that robot access matters
published this research on July 9, 2026. Shmuel Berman, Michael Ilie, Jia Deng, and Daniel Freeman report tests of language models controlling simulated and physical robots. They find that performance depends heavily on how a model is connected to a robot: models mostly fail when directly controlling the joints, but can complete some real navigation and manipulation tasks when supervising a controller or using orientation tools. The authors argue that this matters for safety because a model can affect the physical world without controlling a robot’s joints itself; access to a capable controller may be enough. In their tests, pretrained policies raised task performance, but models still struggled with spatial memory, long plans and reliable task completion. In one physical-robot run, a model misjudged a trash can as out of the way; the robot struck and dragged it before the team stopped it. The authors conclude that evaluations and deployments should treat access level as part of the system. They call for clearer limits on physical access, so a system can affect some objects while being blocked from others. Real-world trials were limited, and how well the results carry over to other robots, tasks and access controls remains unknown.
Original source
· Article
Source details
Original source date: Jul 9, 2026 (2026-07-09T00:00:00.000Z).
Date basis: Date stated on the publisher’s page.
Added to Escape Meridian: 2026-11-07T04:33:24.959Z. First observed: 2026-10-20T02:47:20.265Z. Retrieved: 2026-10-27T21:37:20.343Z.
Limits
Text as retrieved on October 27, 2026; originally published July 9, 2026. The authors describe limited real-world trials; those results do not establish how performance generalizes beyond the tested robots and tasks. The reported results concern the authors’ test suite and selected control interfaces; they do not establish performance for every robot or deployment.
Open question
How well would these findings carry over to robots, tasks and access controls beyond those tested?
Source-stated
The authors report that a model’s robotics capability depends substantially on its control interface; direct joint control mostly fails, while higher-level assistance can support some real tasks.
When they must drive the joints themselves they mostly fail. But when they supervise a pretrained controller or use simple orientation tools, they can complete real navigation and manipulation tasks.
Source-stated
The authors say access to a capable controller matters for safety because a model can affect the physical world without controlling robot joints directly.
a model does not need to drive joints itself to act capably in the world, only access to a competent controller.
Source-stated
In a physical-robot run, the authors say the model misjudged a trash can and the robot struck and dragged it before the team stopped it.
The trash can was in fact directly in front of the dog. It walked into it, got a leg caught, and dragged the can for a couple of meters before we stopped it.
Source-stated
The authors conclude that evaluations and deployments should account for system access, and call for clearer limits on physical access.
Evaluations and deployments need to treat access level as a core part of the system, because small changes in tools or control can produce large changes in capability.
Source-stated
The authors say real-world explorations were limited in trial count and generally aligned with simulation while revealing failure cases.
Although we could not achieve high N count trials due to the serial nature of work in the real world, our explorations generally aligned with our simulated findings
Source and contributor context
Anthropic · Publisher
The publisher is identified here. No individual author has been inferred.
Source media
Media retrieval status: unchecked.
Terms and references
Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.
Pre-training
A model's initial training on a large dataset, before further adaptation for particular uses.
Anthropic
Anthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Editorial provenance
Version 1. Publication ID: c5fcfad6-92c4-9ba7-c6dc-167392f0f84e.
Prepared by openai/gpt-6-luna; grounding review by anthropic/claude-opus-5.5.
Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-07T04:30:23.649Z. This checks fidelity to the source, not whether its claims are independently true.
Editorial selection: accept; reasons: bridge_admitted_by_model.
Observation: 0e3293813992a995d4c6f5baa718f5e442423b6bd046ffdacd6e27a9ab1e52d3. Source text hash: 492785ba29a8caf5643d7958d25db11a940c7459885a11bba2d8de77b7e5729c.
uncertain · 2026-11-07T04:30:23.649Z · anthropic/claude-opus-5.5
Publication: c5fcfad6-92c4-9ba7-c6dc-167392f0f84e
attribution — pass: The reading correctly attributes the research to Shmuel Berman, Michael Ilie, Jia Deng and Daniel Freeman, published by Anthropic. Findings and safety conclusions are framed as the authors' reports and arguments, not as established fact. The title's phrase 'argue in Anthropic' is awkward but does not misattribute.
Shmuel Berman, Michael Ilie, Jia Deng, and Daniel Freeman
summary — uncertain: The summary accurately conveys the interface-dependence finding and the safety argument. It drops the source's other central thesis: models are improving quickly across generations, and the reliability gap is 'closing with each model generation.' Without it, the summary reads as mostly limitations and loses the authors' force. Smallest repair: add one attributed sentence saying the authors report rapid, uneven generational gains, especially with higher-level control. 'Policy' and 'orientation tools' are also unexplained beyond the pretrained definition. A brief gloss, such as a separate network turning high-level commands into joint movements, would help.
Models are getting better at robotics quickly, but we found that how capable they are depends heavily on how they are connected to the robot
date — pass: The reading states July 9, 2026, which matches the UTC calendar day of evidence.originalPublished, and labels the text as retrieved on October 27, 2026. The page was modified on October 23, 2026, but the reading relies on core body passages that appear integral to the original article. There is no hindsight framing, and the authors' expectations are not presented as outcomes. The evidence is a publisher page, not an archive copy.
support — pass: Each claim matches its quoted source text. That includes the interface dependence, the controller-access safety point, the trash-can incident, the conclusion on access level and the limited real-world trials. The statement that access to a capable controller 'may be enough' stays within the source's wording. The open question about generalization follows from the authors' own stated limits. No benefits or costs are invented.
a model does not need to drive joints itself to act capably in the world, only access to a competent controller.
media — pass: No media was selected, and no verified media candidates were supplied, so nothing is misidentified or invented.
Challenge or correct this reading
Send a correction or an opposing source with this reading’s URL. Disagreement and uncertainty can remain unresolved.
Anthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Explore AnthropicAnthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Explore AnthropicA model's initial training on a large dataset, before further adaptation for particular uses.
Definition referenceAnthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Explore AnthropicAnthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Explore AnthropicA model's initial training on a large dataset, before further adaptation for particular uses.
Definition referenceAnthropic develops Claude and publishes research about AI capability, safety and how people use its systems.
Explore Anthropic