US export controls on Anthropic's Fable 5 / Mythos 5 models

The order's mechanism was a Bureau of Industry and Security 'Is Informed' letter under the Export Control Reform Act of 2018, the Commerce Department's primary authority for dual-use export controls, requiring an individually validated license before any foreign national could touch either model ^[1]. According to a Commerce letter to CEO Dario Amodei, a license was suddenly required for the export, reexport, or in-country transfer of Fable 5 and Mythos 5 to all destinations worldwide and to all foreign persons ^[2]. Skadden partner Brian Egan called the move telling: the 'is informed' authority itself is not novel, but the breadth of the Anthropic order - barring access for any foreign national anywhere in the world, for models that had been under no export controls at all - is unprecedented ^[1]. This is the first time the authority had been trained on a commercially available AI model deployed to hundreds of millions of people, which is exactly why Anthropic pushed back on a narrow jailbreak finding triggering a global recall ^[3].

White House AI adviser David Sacks framed the trigger as a trusted partner testing Fable that came forward with a jailbreak of its guardrails ^[4]. Those guardrails were meant to gate Mythos's cybersecurity capabilities, and the government treated the bypass as a national-security risk; Anthropic countered that comparable capability was already available from other deployed models including OpenAI's GPT-5.5 ^[3][4]. Policy expert Dean Ball captured the ambiguity, saying he could not tell whether the order was lawfare against Anthropic specifically or extreme national-security hawkishness ^[5]. Cybersecurity researcher Peter Girnus offered a blunter read: if you describe your product as a munition in every press release, eventually a government takes you at your word ^[5]. A separate Semafor thread from Reed Albergotti reported the limits were partly over suspicions that a China-linked group had accessed the Mythos model, a claim that has not been independently confirmed.

The order asked Anthropic to police something an API cannot see. Acceligence CIO Yuri Goryunov noted there is no way to check citizenship through an API call, adding that roughly three-quarters of Americans do not even hold passports ^[6]. Analysts also reframed what an export even means here: Greyhound Research's Sanchit Vir Gogia argued a hosted model hands the user no weights and no code, only inference, and inference is a capability, not a file ^[6]. Info-Tech's Valence Howden called this a shift from data sovereignty to capability sovereignty ^[6]. The practical bind is that once an 'Is Informed' letter issues, every unlicensed interaction with a foreign person becomes a potential violation - an expansive compliance surface for a globally hosted product ^[6].

The directive arrived June 12 at 5:21pm ET and the models went dark by roughly 12:25am ET on June 13 ^[2][5]. The thaw came in two steps. On June 27, Commerce cleared Mythos 5, Anthropic's strongest cybersecurity model, for redeployment to a small group of roughly 200 cyber defenders and infrastructure providers via Project Glasswing, including Apple, Google, Cisco, Nvidia, and Microsoft ^[7]. Then on June 30, Anthropic said Commerce had lifted controls on both Fable 5 and Mythos 5 outright, with access restoration beginning the next day ^[8][9]. The resolution came after Anthropic strengthened safeguards and collaborated with U.S. agencies; Commerce Secretary Howard Lutnick said the effort yielded significant progress, and co-founder Tom Brown reportedly led the negotiations ^[7].

The timing was a gift to Beijing. One day after the ban, Zhipu AI released GLM 5.2 as fully open weights under an MIT license, letting anyone download and run it without approval gates, precisely when U.S. rules pulled Fable and Mythos and OpenAI restricted GPT-5.6 to vetted partners ^[10]. The pull is not just openness but price: GLM 5.2 runs about $1.40 input and $4.40 output per million tokens against Anthropic Opus 4.8 at $5 and $25, roughly one-fifth the cost, and it is competitive on benchmarks - Terminal-Bench 2.1 at 81.0 versus Opus 4.8's 85.0, MCP-Atlas at 77.0 versus 75.3, SWE-bench Pro at 62.1 versus GPT-5.5's 58.6, and the highest Artificial Analysis Intelligence Index score among open weights at 51 ^[10]. Early pilots in Southeast Asia and Latin America show firms switching from U.S. APIs to self-hosted GLM and halving infrastructure bills ^[10]. Harvey's Gabe Pereyra called GLM 5.2 the first open model that can compete with closed-source models ^[10]. Lifting the export controls restores Anthropic's access, but the enterprise budgets and self-hosted deployments that migrated during the outage do not automatically reverse.