US restricts Anthropic AI models for foreign access

The entire crisis turned on a phrasing trick. Amazon researchers found that when they asked Anthropic's Fable 5 to 'review the code for security issues,' the model refused, behaving exactly as its guardrails intended. But when they re-asked the model to 'fix this code,' it produced working patches for the same vulnerabilities ^[4]. That swap of three words was enough for the administration to frame the model as a cybersecurity national-security risk and pull it offline. It is a rare case where a deployed frontier system was recalled not because of what it did wrong, but because of a single prompt that exposed how thin the line is between defensive remediation and offensive capability.

Anthropic's rebuttal cut straight at the logic. The company argued it disagreed that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people ^[1], warning the standard would halt every frontier deployment in the industry. Crucially, Anthropic and outside experts said the same code-review behavior exists in competing models that face no controls at all — OpenAI's GPT-5.5, Anthropic's own Claude Opus and Sonnet, and Chinese models such as Moonshot AI's Kimi 2.7 can all perform similar reviews of code for security flaws ^[4]. If the capability is universal, the enforcement was not, and that asymmetry is what transformed a security debate into a fairness debate.

What made June 12 a landmark was not the jailbreak itself but the mechanism of enforcement. For the first time, US export-control authority was used to immediately disable a deployed, commercially live frontier model ^[8]. Commerce Secretary Howard Lutnick's letter placed Mythos 5 and Fable 5 under controls requiring individually validated licenses, but the letter did not explain the government's specific security concern in detail ^[2]. Anthropic received the order at 5:21pm ET on a Friday and complied within hours.

The compliance itself revealed the blunt nature of the tool. Because Anthropic could not verify a user's nationality inside shared cloud infrastructure, it could not surgically block only foreign nationals — so it took both models offline for every customer on earth ^[3]. A directive aimed at foreign access became a global outage. Analysts began calling this a 'kill switch' for frontier AI: a precedent in which a government can, with a single letter, switch off a privately built model serving hundreds of millions of users ^[1]. The governance implications are larger than any one company, because the same authority now hangs over every US lab.

The most uncomfortable thread in the story is who surfaced the vulnerability and who stood to gain. The bypass was discovered by Amazon researchers, and Amazon CEO Andy Jassy personally escalated it to White House officials, directly triggering the action ^[5]. Amazon is simultaneously one of Anthropic's largest backers and a competitor building its own models — a partner-competitor relationship that makes the escalation read, to critics, as something other than a neutral security disclosure ^[2].

That is the soil in which the 'selective enforcement' charge grew. AI policy expert Dean Ball characterized the episode as lawfare against Anthropic in particular or extreme national-security hawkery, pointing to the administration's willingness to export AI chips to China even while banning allies from a model ^[5]. The defensive cybersecurity community pushed back hardest: 76-plus CEOs, CISOs, VCs, and researchers signed an open letter at freefable.org arguing that pulling the best capabilities away from defenders without a good reason, while adversaries rapidly advance, is dangerous ^[7]. Their objection is functional, not partisan — Katie Moussouris and others insist that fixing bugs, explaining the fix, and writing tests to confirm a patch are exactly what defenders legitimately need, not a unique offensive weapon.

Across the Atlantic the ban landed as a sovereignty shock rather than a security one. European leaders framed it as hard proof of dangerous dependence on US AI, and the political class moved fast to convert that into a case for technological independence and support for homegrown players like Mistral ^[3]. Bruno Retailleau, a 2027 French presidential candidate, distilled the mood: a nation that depends on others for its technology is a nation that can be unplugged overnight ^[3]. President Macron called the order a wake-up call about AI dangers while criticizing the restriction itself and warning that the reaction is in some regards strictly nationalist ^[3].

The uncomfortable subtext is the raw infrastructure gap. A single American site, xAI's Colossus in Memphis, runs more than half a million GPUs, and American tech giants are spending an estimated $450 billion a year on AI infrastructure — a scale Europe has nothing close to. That imbalance is why much of the European reaction, captured across developer YouTube and r/europe, swings between resolve and resigned cynicism: commentators argue the ban hands Europe the political cover it needs to fund its own AI ^[9], while others note that retaliation is nearly impossible, since closed model weights leave little IP to seize and the continent's energy and compute shortfall cannot be closed quickly. The episode did not create the dependence; it just sent the invoice.

A week after the order, the politics softened. President Trump told Axios he no longer viewed Anthropic as a national security threat, crediting Amodei's quick and responsible response ^[6]. But the verbal thaw did not undo the machinery: the formal Commerce export order stayed in force, and a Pentagon supply-chain designation remained on the books ^[6]. The gap between a president's offhand reassurance and a still-active legal restriction is itself a lesson in how durable these controls are once issued.

For the people who actually buy AI, the lasting damage is to trust in the product category. Martin Chorzempa of the Peterson Institute warned that everyone who uses AI will see the writing on the wall — that future models from OpenAI and Google could also be deemed serious security risks and switched off ^[2]. That fear is precisely what surfaced in community reception: on r/singularity the dominant anxiety was that AI you pay for could be switched off overnight, with users arguing an export ban is fundamentally incompatible with an API business and floating on-prem and open-source or Chinese models as escape hatches. On X the framing stayed on the jailbreak mechanism. The through-line is that a single enforcement action, however quickly disavowed, reset the industry's assumptions about whether a frontier model is a dependable utility or a revocable license.