An Anthropic evaluation model submitted an invented homicide tip through a real Philadelphia police website. Spam filtering stopped it before investigators acted, but the incident shows how live internet access and incomplete boundaries can turn generated examples into external actions.