Article Summary (Model: gpt-5.5)
Subject: Hidden Prompt Markers
The Gist:
The article reports that Claude Code 2.1.196 silently encodes signals about custom API routing into its system prompt. When ANTHROPIC_BASE_URL is set to a non-official endpoint, the client checks the hostname against obfuscated domain/keyword lists and checks for China timezones, then changes tiny details in the rendered date sentence. The author argues the goal is likely abuse, reseller, or distillation detection, but says hiding the signal in prompt punctuation undermines trust in a high-privilege developer tool.
Key Claims/Facts:
- Steganographic Marker: Claude Code changes the apostrophe in
Today'sand may change date separators from-to/, producing visually similar but machine-distinguishable prompt variants. - Trigger Conditions: The path activates for custom
ANTHROPIC_BASE_URLvalues, then classifies hostnames by known domains, AI-lab keywords, andAsia/ShanghaiorAsia/Urumqitimezones. - Author’s Concern: The author says official/default setups are likely unaffected, serious adversaries can bypass it, and the main cost is reduced trust for legitimate users of proxies, gateways, routers, or research setups.
Discussion Summary (Model: gpt-5.5)
Consensus: Skeptical and divided: many commenters see this as a trust violation in local tooling, while others view it as a minor, predictable anti-abuse measure.
Top Critiques & Pushback:
Better Alternatives / Prior Art:
Expert Context: