Carney warns on US Anthropic export ban

What makes this episode unsettling is not that a government restricted an AI model, but the speed and totality with which it happened. At 5:21pm ET on June 12, 2026, Anthropic received a US Commerce Department directive citing national-security authorities and ordering it to suspend access to Fable 5 and Mythos 5 for any foreign national ^[1]. Because Anthropic could not reliably separate foreign users from domestic ones in real time, compliance meant the blunt option: take both models offline for everyone, worldwide, within hours ^[2].

The trigger, according to Anthropic, was a 'narrow potential jailbreak' — a technique to bypass the models' safeguards — that the company says is also present in rival systems such as OpenAI's GPT-5.5, which faces no comparable restriction ^[1]. The directive reportedly stemmed in part from suspicions that a China-linked group had accessed the model ^[3]. The mechanism here is the real story: a single letter to one CEO removed two of the most capable models on the market from global circulation in an afternoon, with no transition period and no appeal. That is concentration risk made concrete, not theoretical.

Carney's reaction stood out because of who he is. Before politics he ran the Bank of Canada through the 2008 financial crisis and later the Bank of England, and he reached instinctively for the vocabulary of systemic finance, warning that over-reliance on a few dominant AI systems creates the same kind of 'model risk' that propagated through the financial system in 2008 ^[4]. In banking, 'model risk' describes what happens when many institutions lean on the same flawed assumptions or the same handful of tools — a local failure becomes a system-wide one because everyone is wired into the same node.

Applied to AI, the analogy is pointed: if governments, enterprises, and public services all build on a small set of US-controlled frontier models, then a policy decision in Washington becomes a dependency for everyone downstream. 'Nobody's done anything wrong in this situation,' Carney argued, 'but we will have done something wrong if we just accept this, don't take the lesson, don't build out and diversify' ^[4]. His framing converts a one-off export action into a structural argument about who controls critical infrastructure — and Bloomberg's reporting underscored that this was a deliberate warning about depending on big AI models, not an offhand remark ^[5].

The second-order effect is a scramble among US allies to figure out whether they are next, and what leverage they actually hold. Carney paired his warning with a concrete agenda — diversifying Canada's technology and trade relationships and leaning on the 2.3 billion dollar 'AI for All' strategy launched just ten days earlier ^[4]. He is not alone: across allied developer and policy communities the dominant thread treats this as a sovereign-capacity wake-up call, animated by the fear that a foreign government could effectively switch off a dependent economy without domestic AI and compute of its own.

The uncomfortable counterpoint, surfaced sharply in those same communities, is that escaping US control is structurally hard. As the discussion goes, Anthropic itself cannot simply relocate: it runs on US cloud infrastructure and US semiconductors that are themselves export-controlled, it is incorporated in Delaware, and the bulk of its revenue is American — and the very export-control regime that just cut off foreign users would also constrain any attempt to leave. So the sovereignty conversation splits in two: nation-states talking about building domestic compute and energy capacity, and the blunt reality that today's frontier labs are deeply, perhaps inextricably, tied to the US stack.

Not everyone reads this as principled national-security policy, and the criticism is worth taking seriously precisely because it comes from across the spectrum. Dean Ball, an AI policy expert who served in the Trump administration, called the order 'cartoonish' and said he couldn't tell whether it was targeted lawfare against Anthropic or extreme hawkishness ^[2]. The inconsistency he points to is real: if the cited jailbreak also exists in competing models, singling out one company looks less like security and more like selective enforcement.

A second critique targets enforceability. Gating a model by 'foreign national' status is, as one engineer put it, simply not workable in practice — the category is porous and hard to police ^[3]. And a third strand argues Anthropic partly brought this on itself: by marketing its frontier models in the language of dangerous capability, it handed regulators a rationale to treat them as munitions ^[2]. The throughline is that even sympathetic observers see an action whose costs — talent flight, eroded trust in US labs, and a precedent for instant global shutoffs — may outweigh whatever narrow risk it was meant to contain ^[3].