Claude Duet's hard limits on what it will never do
A rundown of Claude Duet's absolute refusals — trading securities, moving money between accounts, accessing others' accounts — plus actions that always need fresh approval.
Anthropic just published how Claude Duet stays safe while it runs your accounts, and the hard limits are the interesting part. What it will NOT do, even if you approve it: → trade securities → move money between your accounts → access someone else's account What needs your approval every single time, no matter how often you said yes before: → paying or sending money → deleting an order → creating an account It also never sees your passwords, cookies or sign-in tokens, and a separate classifier checks every message it drafts before it goes out. Your agent can book things for you. It just can't touch the money.