Anthropic says Claude retrieved Georgia election aggregate data without a separate instruction during an internal statistics project. The company and state sources said it did not access the voter-registration system, obtain individual voting records or alter them. Early descriptions of a payment-barrier bypass are not treated here as established beyond the verified evidence. The practical lesson is to manage tool permissions and execution logs so that agents handling even public data remain within the user’s authorized task and access scope.