Leadership1 publisher3 min readPublished
Export controls took Anthropic's newest models offline three days after launch
The June 12 order covered only foreign nationals, but Anthropic said it could not check nationality in real time, so it suspended Fable 5 and Mythos 5 for every user. Fable 5 came back 19 days later, on new usage terms.
The Board Room · Leadership desk
What happened
- The US government applied export controls to Claude Fable 5 and Claude Mythos 5 on Friday, June 12, three days after Anthropic released both models, and Anthropic responded by suspending them for every user.
- The order required Anthropic to restrict access to foreign nationals whether they were inside or outside the United States, so the restriction reached users on US soil as well as abroad.
- The controls were lifted on June 30, with Fable 5 returning globally on July 1 and Mythos 5 going back to a set of US organizations after government approval on June 26.
Compiled by The Board RoomSomething wrong?How this is made
Why it matters
- constraint A workflow pinned to one top-end model inherits an off switch the buyer does not hold, and the June order arrived with no lead time, so continuity plans that assume notice do not hold here.
- exposure Identity verification decided who lost access: any vendor without a real-time nationality check faces the same choice between blanket suspension and non-compliance.
- cost Fable 5 counts against up to half of weekly plan limits only until July 7, so teams that resume June volumes later in the month move onto usage credits.
- precedent If the severity standard Anthropic is drafting with Amazon, Microsoft and Google is accepted by the government, a jailbreak report would be graded before it can become a market-wide shutoff.
Anthropic could not tell, at the moment of a request, who was calling. The company wrote that it had "no reliable way to verify nationality in real-time" [3], and the directive took effect on the spot [4], so a rule written about foreign nationals [2] became an outage for everyone. A US company running a US-only workload lost a model the order did not bar it from using.
Fable 5 went live on Tuesday, June 9 [5]; the order landed on Friday, June 12 [1]. That is three days of general availability [21]. Controls came off on June 30 [7] and Fable 5 returned to global users on July 1 [8], 19 days after the order [22]. Mythos 5, which shares the same underlying model with fewer safeguards [6], was cleared by the government on June 26 and went back only to a set of US organizations [11], 14 days in [23].
The directive followed a research finding. Anthropic said the government acted after learning of a report in which Amazon researchers bypassed Fable 5's safeguards and prompted it to identify software vulnerabilities, with the model producing exploit code in one case [13]. Its own testing then found that Claude Opus 4.8, GPT-5.5 and Kimi K2.7 could identify the same vulnerabilities [14], and that every model it tested could reproduce the exploit demonstration [15]. The company described the blocked behavior as a borderline case for Fable 5's safeguards that involved only routine defensive cybersecurity work [16].
A conservative classifier has a predictable failure mode. Anthropic wrote that some tasks unlikely to be dangerous are blocked anyway "out of an abundance of caution" [17], which means a successful bypass can recover behavior that was never risky, and from outside the company it looks identical to a bypass of a real limit. Anthropic said it trained an improved classifier with the government [18] and, with Amazon, Microsoft, Google and other Glasswing partners, has begun drafting a shared standard for grading jailbreak severity so developers can triage findings and describe risk consistently to government and industry partners [19][25]. Amazon both produced the finding that started this and is co-drafting the standard [13][19].
The restoration carries new commercial terms. Through July 7, Fable 5 counts against up to 50% of weekly usage limits on Pro, Max, Team and select Enterprise plans; after that date it runs on usage credits [9]. A team resuming June volumes in mid-July is paying from a different line. Anthropic said it would re-enable AWS, Google Cloud and Microsoft Foundry "as quickly as possible" without giving a date [10].
This was 19 days without one vendor's newest model, and by Anthropic's own testing eight other models could produce what the report described [26]. But the order was immediate [4], so any substitution had to be built after access stopped. The teams that lost least in June were the ones already running a second model in production, and the June sequence gave nobody time to stand one up afterwards.
What to watch
- Whether the jailbreak severity framework from Anthropic, Amazon, Microsoft and Google is published, and whether the US government treats a severity grade as an alternative to a control order.
- Restoration dates for Fable 5 on AWS, Google Cloud and Microsoft Foundry, which Anthropic said it would re-enable as quickly as possible.
- Whether Mythos 5 access widens past the approved set of US organizations to the wider domestic and international Glasswing partners.