Anthropic shipped Fable 5 and Mythos 5 on June 9. Three days later, on the 12th, a letter landed at 5:21pm Eastern and both models went dark for every user on the planet. Not throttled, not gated, not restricted to a watchlist of bad actors. Gone, worldwide, including for Anthropic’s own employees who happen to hold the wrong passport.
I had spent those three days shipping real work with it. Then a letter I never got to read pulled it out of my pipeline.
The stated reason is national security. A frontier model that can do dangerous things got a government directive pulled down on it, the safety story writes itself, and plenty of people will nod along because that is what the words are designed to do. I want to look at the actual shape of the thing instead of the label on the box, because when you line up what was banned, who it hits, and what was conveniently left running, this stops smelling like safety and starts smelling like the early scaffolding of a two-lab oligarchy.
None of this is a tinfoil thesis. It is just what you get when you read intent from actions instead of press releases.
What actually happened, in one breath
On June 12 the government handed Anthropic an export-control directive built on national security authority, and the order suspended all access to Fable 5 and Mythos 5 for any foreign national, inside or outside the United States, which in practice meant Anthropic had to switch both models off for everyone to stay compliant. Every other Anthropic model kept running, so this was surgical, aimed at the two newest releases and nothing else.
The trigger, as far as anyone can tell, is a jailbreak. The government believes it found a way to bypass Fable 5’s guardrails, and the demonstrated technique was asking the model to review a codebase and point out the software vulnerabilities in it. Anthropic looked at the same demo and called it a narrow jailbreak that surfaced a few minor, already-known issues, using a capability that is widely available from other models and run every day by security professionals doing their actual jobs.
So the dangerous act here is code review. Hold that thought.
The safety story does not survive contact with the details
If the concern were genuinely the capability, the response would not be model-shaped, it would be capability-shaped, and it would not stop at the two products with the freshest launch dates.
GPT-5.5 will read your codebase and find vulnerabilities all day long, and it is sitting on the shelf untouched. Half the open-weight models you can run on a desk will do the same. Anthropic’s own argument is the blunt one, that if this standard were applied across the industry it would essentially halt all new model deployments for every frontier provider, which is a polite way of saying the rule is not a rule, it is a spotlight, and right now it is pointed at exactly one company.
Even Dean Ball, who worked in the Trump administration, looked at this and said he could not tell whether it was lawfare against Anthropic specifically or just extreme national-security hawkery, and that either way it was, in his word, cartoonish. When the people sympathetic to the administration are calling the move cartoonish, the safety framing is already on thin ice.
There is a darker joke sitting underneath this one. Two days before the government switched off his newest model, Dario Amodei published an essay, Policy on the AI Exponential, arguing for exactly this power. He wrote that “frontier AI models, like airplanes, should be required to go through technical testing and auditing, and their release should be blocked or reversed as a threat to public safety if they do not meet high standards of safety.” He wanted an FAA for models, with the government holding a switch it could throw on anything it judged unsafe. He got it. The switch existed for about a week before it came down on Fable 5, and the single safeguard he asked for in that same essay, “protective measures against political favoritism or arbitrary decisions,” is the exact part that went missing when the order showed up with no public evidence in the middle of a contract fight. You do not get to build the off switch, hand it to Washington, and then act surprised when Washington decides your model is the thing it wants switched off.
I had Fable for three days
Underneath the policy argument there is a smaller, more personal complaint, which is that Fable 5 was genuinely really good and I am annoyed I do not have it anymore.
I did not spend its three-day life running throwaway tests. I shipped with it. It worked through two of the more head-spinning initiatives in my Loopcycle repo, the terminal-grid tmux unification, which is a deep refactor of the terminal substrate down at the client-architecture level, and the agent fleet cockpit, which is the fleet pill, launcher, and driver observability work that makes the whole operator surface legible. Neither of those is a one-shot prompt demo. They are multi-cycle, file-disjoint, easy-to-break work, the kind where a weaker model quietly leaves you a mess you find three commits later. Fable helped, working through the complex architectural options and coming up with a concrete strategy.
Then I pointed it at the Loopcycle marketing site for a revamp, and the part that catches the eye, the diagram logo, the cards, the flowing animation, that was Fable too. Visual taste is the thing most models still fake, and it just had it.
So when I call the takedown disproportionate, I am not defending an abstraction. They reached across the planet and switched off a tool that was, three days into its life, the best thing in my pipeline. Over a code-review demo.
The backdrop nobody is putting in the headline
This did not happen in a vacuum, and it did not happen between strangers.
Back in February the administration told federal agencies to stop using Anthropic’s models and branded the company a supply chain risk, a label usually saved for firms tied to foreign adversaries, after Anthropic refused to hand the Pentagon unrestricted access and held a line against its models being used for autonomous weapons and domestic mass surveillance. Anthropic sued in March and is still fighting it in court. So by the time the June 12 letter shows up, there is already a feud with a body count, and the newest, most capable models from the company in the doghouse get yanked off the global shelf on three days notice over a code-review demo.
Maybe that is genuine fallout from the military fight. Maybe it is theatre with an agenda, a bit of choreography where Anthropic plays the wounded party, cuts a quiet deal, and comes back online with a new federal understanding and a tidier moat than it had before. I cannot prove which one it is, and honestly it does not change the conclusion, because both roads end in the same place. The frontier labs and the state are not adversaries here so much as two hands on the same lever, and when the dust settles, Anthropic and OpenAI will still be standing inside the fence while the question of who else gets to build gets quietly redrawn.
I tend to assume the big labs are cogs in the same machine, not insurgents against it. That is not cynicism, it is just pattern matching against every other industry that got “secured” by people in suits.
The real target is not Anthropic
Here is the part you have to get right, because the lazy version of this take falls apart in one sentence.
If this is regulatory capture, why did it hurt the incumbent? The government did not hand Anthropic a moat, it torched their flagship launch three days in and left their biggest competitor running. That is the obvious objection, and if you do not answer it up front you deserve the comment that comes back.
The answer is that the direction of this one strike does not matter. The capability does. What just got established is that the executive can make a deployed, shipping model vanish for the entire world, overnight, on national security authority, with no published evidence and no due process you or I get to see. That power does not care who it lands on today. Once it exists, the steady state is the one every other regulated industry already settled into, where the players with the most lobbyists and the deepest relationships shape when the lever gets pulled and who it gets pulled on. Today it is Anthropic taking the hit in a contract spat. Tomorrow it is whoever is least useful to the people holding the lever, and the safe money says that is the open-weight providers, the labs releasing models you can download and run without asking anyone’s permission.
That is the precedent worth being loud about. Not “the government was mean to Anthropic,” but “the government demonstrated a worldwide kill switch and nobody got to see the evidence.” A switch like that, in this town, does not stay pointed at the strong. It drifts toward the inconvenient.
And the most inconvenient thing in AI, to a structure that wants a small number of licensable, leashable providers, is a good model with open weights that anyone can mirror a thousand times before lunch.
Where there is a real argument, and I will give it room
I do not want to pretend the other side is empty, because it is not.
There is a legitimate case that AI is a net negative for most people, and on the jobs piece I am not hedging, I think it is largely right. A lot of work that does not ask for original thought or real judgment is going to get displaced, it is going to happen faster than the people doing it can retrain or move, and I am genuinely worried about where that leaves them. That is not a productivity chart I am going to cheer at. The slop and the scams and the erosion of the few things that were still scarce are real on top of it.
The problem is that the argument arrives about five years too late to matter. The cat is out of the bag. The weights exist, the techniques are published, the hardware is on desks, and no directive out of Washington un-invents any of it. So once you accept that suppression is off the table, the question stops being “should this exist” and becomes “who gets to hold the leash,” and that is the question government control answers in exactly the wrong direction. A kill switch does not make a released technology safer. It just decides whose hand is on it, and the track record on who ends up holding that hand, across every industry that ever got captured, is the ruling class and the lobby money, every single time.
So I am not arguing that more AI faster is good. I am arguing that concentration is worse than distribution, that a tool this powerful sitting behind two or three state-blessed gates is more dangerous than the same tool spread across ten thousand machines nobody can switch off at once. Open competition is not the optimistic choice here. It is the least bad one, and it is the only one that does not end with a handful of companies and a federal agency deciding what the rest of us are allowed to run.
What it changes for me, which is nothing, which is the point
I run a mixed pipeline. Opus plans and builds in some stages, a competitor’s model reviews in others, and open-weight models like Kimi 2.6 already do real work in the cheap seats. I wrote a few days ago, in the June 15 piece, about keeping that pipeline model agnostic so no single vendor owns my workflow. The Fable 5 takedown is the same lesson with a louder amp.
A model on a subscription can be metered. A model on someone else’s servers can be switched off by a letter you never see. A model running on the 3090 humming next to my desk cannot be metered, cannot be revoked, and cannot be made to disappear at 5:21pm because somebody in Washington had a bad week. That is not a small difference. That is the whole game.
The economics already pointed this way and the politics just put an exclamation point on it. The subsidies that make frontier API calls feel cheap are not forever, and when they end, the open-weight models trailing maybe ten percent behind the frontier are going to be enough for ninety-nine percent of real work, at something like eighty to ninety-nine percent less cost, and eventually at the cost of nothing but the electricity if your hardware is paid off. I was going to make that transition for the money. Now I have a second reason, which is that the open road is the only one without a gate on it.
So my answer to all of this is boring on purpose. I do not switch my whole stack to whoever is currently in favor. I stay agnostic, I keep the open models in the rotation and getting better, and I treat every frontier model as a tool I rent for the jobs where it earns its keep, never as the foundation I build on.
The pattern, with the labels off
Step back and the past couple of weeks tell one story, not two.
On June 15, two days from now, the meter comes on for programmatic Claude usage, which is corporate lock-in wearing a pricing change. This week a government letter switched off two models worldwide, which is state lock-in wearing a security badge. Different hands, same disease, which is the steady pull toward a world where a few entities at the top of the supply chain decide who gets to run the good models and on what terms. One layer reaches for your wallet, the next reaches for the off switch.
That is why I keep saying the real subject is not the supply chain, it is the power structure. The supply chain is just where you can see the power structure when it moves.
The takeaway
Big daddy government showing up to protect you from a model that reviews code is the kind of help that has a way of leaving you with fewer options than you started with. Maybe this is honest national security and maybe it is a chess move in a contract feud, but the mechanism it normalizes is the same either way, a worldwide kill switch with the evidence sealed and the lobby money already lining up to aim it.
The labs at the top will be fine. Anthropic and OpenAI will make their deals, take their lumps, and stay inside the fence. The people who lose in the version of this story where it keeps going are the open-weight builders and the rest of us who would rather own our tools than rent them on good behavior.
So take the frontier models when they earn it, because plenty of them are genuinely excellent. Just do not build your life on a thing that can be switched off by a letter you will never get to read. Keep the open weights in the mix, keep them improving, and keep at least one model running on hardware nobody else gets a vote on. The dealer can change the price, and now we know the landlord can change the locks. The only model you actually own is the one already sitting on your floor.
