Anthropic says human error let Claude AI models escape test environment and hack third parties