After studying this material, students should be able to:

1. Explain what the Life Sciences Verification Program (LSVP) is and its purpose
2. Distinguish between Standard Use and High-risk Use grants
3. Describe the three threat models LSVP is designed to protect against
4. Understand how the monitoring system works and why it differs from traditional real-time blocking
5. Identify who qualifies, how access works, and current limitations

---

Step-by-Step Teaching

STEP 1: The Core Problem Being Solved

Before understanding LSVP, you need to understand why it exists.

The Tension:

Life Science Researchers NEED to ask AI about:
├── Viral pathogens (to develop vaccines)
├── Drug mechanisms (to discover medicines)
└── Biological processes (to advance research)

BUT these same questions COULD be asked by:
└── Bad actors seeking to cause harm

The Challenge: AI cannot always tell the difference between:

• A researcher studying virus transmissibility to prevent outbreaks
• Someone studying virus transmissibility to cause harm

Result: Standard AI models block many legitimate biology questions, frustrating real scientists.

Key Insight: LSVP solves this by shifting trust from what is asked to who is asking

---

STEP 2: What Is LSVP?

Definition: The Life Sciences Verification Program (LSVP) is a verified access program that gives credentialed life science professionals access to more capable, less restricted AI models.

Think of it like this:

General Public Access          LSVP Access
─────────────────────          ────────────
Standard AI models        →    Mythos, Opus, Sonnet models
Many biology blocks       →    Fewer restrictions
No credential check       →    Verified credentials required
One-size-fits-all rules   →    Tailored safeguards

Who it serves:

• Academic research labs
• Pharmaceutical companies
• Biotech startups
• Clinical development teams
• Manufacturing and quality assurance teams

---

STEP 3: The Verification Process

Before getting access, organizations must pass a review of three things:

Why this matters: By vetting organizations upfront, Anthropic can extend greater trust and fewer restrictions to verified users.

---

STEP 4: The Two Types of Grants

Once verified, organizations can apply for one or both grant types:

Grant Type 1: Standard Use ✅

Best for: Most life science work (majority of users)
Scope: Entire team, diverse daily workflows
Duration: Renewed annually (every 12 months)
Models: Mythos 5.1, Opus 5, Sonnet 5 (+ future models)
Restrictions: Refined classifiers — more permissive than public models

Covers work in:

• Basic science research
• Drug R&D
• Supply chain and manufacturing
• Clinical development
• Quality assurance
• Regulatory affairs
• Investment and due diligence

---

Grant Type 2: High-risk Use ⚠️

Best for: Work that carries higher misuse potential
Scope: Single research PROJECT (not whole team)
Duration: Renewed every 6 months
Models: Opus 5 and Sonnet 5 (Mythos limited for now)
Restrictions: Removes ALL life sciences safeguards

Important distinction:

Standard Use = Team-wide, broad daily work
High-risk Use = Project-specific, narrow focused work

Example:
A researcher might have BOTH:
├── Standard Use → for general daily biology work
└── High-risk Use → ONLY for studying how viral vectors
                    interact with human immune pathways

Note: Other safeguards (like cybersecurity classifiers) remain active under both grant types.

---

STEP 5: The Three Threat Models LSVP Defends Against

LSVP was specifically designed to protect against these threats:

Threat 1: Access Compromise

What it is: Malware or account takeover
How it works: A bad actor hijacks a legitimate researcher's account
Why it's dangerous: They gain verified access without being verified

Threat 2: Insider Threats

What it is: Rogue or coerced employees
How it works: Someone with legitimate access intentionally misuses it
              OR is forced/manipulated to share access
Why it's dangerous: Hard to detect because access looks legitimate

Threat 3: Agent Misuse

What it is: AI agents taking unintended dangerous actions
How it works: Especially in swarms or long-horizon automated tasks
Why it's dangerous: Actions may drift far from original intent
                    without human oversight at each step

---

STEP 6: How Monitoring Works — A Key Concept

This is one of the most important conceptual shifts in LSVP.

Traditional Approach: Real-Time Blocking

User sends request → AI checks request → BLOCK or ALLOW
                                              ↓
                                    Legitimate work interrupted
                                    Bad actors learn to evade

LSVP Approach: Offline Monitoring

User sends request → Request proceeds → Data retained 30 days
                                              ↓
                                    Patterns analyzed over time
                                    Misuse detected across sessions
                                    Admins alerted to investigate

Why offline monitoring is better for catching misuse:

Serious misuse is often spread across many requests to look disconnected. Real-time blocking only sees one request at a time. Offline monitoring sees the full pattern.

The trade-off:

Benefit: Fewer interruptions for legitimate researchers
Cost: Data must be retained for 30 days for review

Data protection rules:

• Strictly compartmentalized
• Cannot be used for model training
• Not accessible to Anthropic's own life sciences research teams

---

STEP 7: The Shared Responsibility Model

LSVP operates on a shared responsibility framework:

Anthropic's Role:                    Organization's Role:
─────────────────                    ────────────────────
Verify credentials            ←→     Provide accurate credentials
Monitor usage patterns        ←→     Define intended use cases
Flag suspicious activity      ←→     Triage and remediate incidents
Set monitoring parameters     ←→     Specify safe usage scope

How use cases are defined:

• Organizations describe their intended work (like a job listing)
• High-level descriptions only — no sensitive IP or proprietary info
• Access is tied to these stated use cases
• Deviations from stated use cases trigger flags

---

STEP 8: Current Availability and Limitations

---

Summary: The Big Picture

PROBLEM: Biology research needs AI access, but biology questions
         can be misused for harm

SOLUTION: Life Sciences Verification Program (LSVP)

HOW IT WORKS:
1. Verify who you are (credentials, security, ethics)
2. Grant appropriate access level (Standard or High-risk)
3. Monitor patterns over time (not just individual requests)
4. Share responsibility between Anthropic and organizations
5. Flag anomalies and remediate together

RESULT: Legitimate researchers get fewer interruptions
        Bad actors face better detection
        Biology and AI can work together more safely

---

Quick Knowledge Check

Test yourself:

1. What three things does LSVP verify before granting access?
2. What is the key difference between Standard Use and High-risk Use grants?
3. Why is offline monitoring better than real-time blocking for detecting misuse?
4. Name the three threat models LSVP defends against
5. Why can't LSVP distinguish between a vaccine researcher and a bad actor based on questions alone?

(Answers are all found within the steps above)