[edit] I'm dumb and was melodramatic.

After 2 hours of trying to post on HackerOne, I can't actually give a heads up about a potential new attack surface because I wasn't willing to purposefully replicate it. I have a private repo with all JSONLs — comment with an official @anthropic email for access.

Hedge: I'm not a coder, so I might be chasing ghosts. But I think it's something to seriously look at. Couldn't investigate too deep because I kept hitting the Fable > 4.8 tripwire.