US government forces Anthropic to suspend Fable 5 and Mythos 5 worldwide

The directive Anthropic received on June 12 was, on its face, narrow: it barred any foreign national — inside or outside the US, including Anthropic's own foreign-national employees — from accessing Fable 5 and Mythos 5 ^[1]. Export controls of this kind normally assume a deployer can gate access by who a user is. But a consumer API serving a model Anthropic describes as reaching 'hundreds of millions of people' has no reliable, real-time mechanism to verify citizenship at the request level ^[1]. Faced with a rule it could not selectively enforce, Anthropic took the only compliant path available and disabled both models for everyone, everywhere ^[2].

The mechanism matters because it converts a targeted restriction into a total outage. Crucially, the takedown was surgical at the product layer even as it was blunt at the user layer: Claude Opus 4.8, Sonnet, and Haiku all stayed online, so only the two newest models — launched just three days earlier on June 9 — went dark ^[2]. Commerce Secretary Howard Lutnick formalized the action in a letter to Dario Amodei, putting export, re-export, and even domestic transfer of the affected models behind a licensing requirement ^[4]. The lesson industry observers drew is structural, not political: when compliance can only be all-or-nothing, a narrowly worded national-security order functions as a worldwide off switch.

The most striking thread in the reporting is that the crackdown on Anthropic's flagship products was reportedly set in motion by Anthropic's own largest backer. According to TechCrunch and The Information, Amazon CEO Andy Jassy told Treasury Secretary Scott Bessent and other officials that Amazon researchers had used Fable 5 to obtain cyberattack-usable information — prompting the model to read a specific codebase and identify software flaws ^[5]. Amazon has invested roughly $13 billion into Anthropic, which makes the episode less a typical regulatory dispute than an investor turning on the flagship product of its own largest AI bet ^[5].

That tension reframes the 'national security' framing as partly a story about competing incentives among insiders. Anthropic, for its part, characterized the same exercise as surfacing only previously known minor vulnerabilities — capabilities it says are widely available from rival models including OpenAI's GPT-5.5 ^[1]. So the identical technical event reads two ways depending on who is describing it: to Amazon and the administration it is a cyberattack-enabling jailbreak; to Anthropic it is a routine, non-novel finding. The unresolved factual gap between those accounts — what the model actually produced, and whether it was meaningfully new — is the hinge on which the entire dispute turns.

The public fight quickly narrowed to a single question: was a reported jailbreak severe enough to justify pulling a deployed model? Anthropic's understanding is that the government 'believes it has become aware of a method of bypassing, or jailbreaking Fable 5,' but that it was given no specifics ^[1]. Anthropic's core argument is a slippery-slope one — that 'if this standard was applied across the industry, we believe it would essentially halt all new model deployments for all frontier model providers,' because comparable vulnerabilities exist across competing systems ^[1].

The administration's side, voiced by David Sacks, inverts the framing into a safety-versus-commerce choice: a 'highly credible trusted partner' surfaced the flaw, the administration asked Amodei to fix it or de-deploy, and he refused, so 'Anthropic prioritized the continued offering of the consumer model over safety' ^[3][6]. Outside experts largely sided with Anthropic on proportionality — Dean Ball, who briefly served in the Trump administration himself, called the move 'simply cartoonish' ^[7]. That alignment of a former insider with the company under sanction underscores how contested the threat assessment is even among people sympathetic to export controls in principle.

Whatever the merits of this specific jailbreak, the durable consequence is the precedent. Multiple outlets characterized the suspension as the first time the federal government has forced a publicly deployed frontier AI model offline ^[7]. That establishes that a deployed model is not a fait accompli — it can be revoked, by letter, after launch, on national-security grounds the public cannot fully inspect. Notably, The Information reported the government is unlikely to extend this particular export control to other AI companies, which suggests the action is being treated as a one-off rather than a new general regime ^[8]— but the capability, once demonstrated, does not un-demonstrate itself.

The second-order reaction concentrated on sovereignty and centralization. European and Canadian observers framed the episode as a 'wake-up call' about depending on US-controlled AI, since a US directive instantly cut off non-US users ^[9]. Across social channels the dominant sentiment was sharply critical of the government action, with the most resonant argument being a centralization one: a model behind a single hosted API can be switched off globally by a single government decree, which revived advocacy for locally run models beyond the reach of any one directive. The reaction was less about Fable 5 specifically than about the realization that the kill switch exists at all — and that it sits with a government rather than the lab that built the model.