I was also confused. It's oddly worded. From Anthropic's news post:

We reviewed a demonstration of this specific technique being used to identify a small number of previously known, minor vulnerabilities.

As far as I can tell, this review preceded the gov order, and it was at this point that Katie Moussouris was involved.