Claude Duet works while you're away, but your passwords never reach the model and sensitive messages face a separate classifier
Anthropic has published the safety design behind Claude Duet, a personal agent still in research preview that uses a cloud computer to read inboxes, draft replies, book things and run routines after the app is closed. Before sending a potentially sensitive message, paying or deleting anything, it shows the action, destination and every recipient and waits for approval. Passwords, browser cookies and sign-in tokens never enter the model, and a safety classifier separate from the main model checks outgoing messages for sensitive information. Anthropic says these safeguards will still occasionally miss or over-flag, so they run alongside the approval mechanisms.