REGULATORY ORDERv1.0
CASE 04

Fable 5, Mythos 5 and the Temporary Access Boundary

Export-control authority applied to frontier model weights and foreign-national access, through an emergency directive.

LayerWhatWhen
Object held Foreign-national access to hosted frontier-model weights and outputs, treated as a deemed export. within three days of release
Where it started to move Existing deemed-export doctrine, applied by letter three days after release, to API and hosted access rather than a lab visit. same moment: Commerce read existing doctrine as already covering it
Where cost arrives first Operations: nationality could not be verified in real time, so both models went down for every customer worldwide. before nationality could be verified in real time
Difference carried A line drawn around foreign-national access took down domestic users, staff, and researchers. Restoration came back in stages, not all at once. after restoration came back in stages

What deemed export was already built to catch

EAR's deemed-export rule already treats giving a foreign national inside the U.S. access to controlled technology as an export to that person's home country, no new statute needed, unlike the compute-access gap RASA exists to close. Commerce read that authority as reaching hosted model access, and reaching foreign nationals abroad too — a reach legal commentators questioned (the Harvard Law Review Blog framed it as an open question: "Is Access to Fable an Export?"). Either way it let Commerce act in hours: a letter from the Commerce Secretary to Anthropic's CEO, three days after release, ordering all foreign-national access cut off immediately.

WhatWhat actually happened
Deemed export (existing doctrine)Foreign-national access to controlled technology, in the U.S. or abroad, already counts as an export to that person's nationality. This predates the case.
Applied here toAPI and hosted access to a frontier model's weights and outputs, not a lab visit or a technical briefing.
Why it could move so fastNo legislation needed: Commerce invoked existing authority directly, by letter, the same week the models shipped.

Anthropic released Claude Fable 5 on June 9, 2026, with the more capable Mythos 5 limited to Project Glasswing partners. Three days later, Commerce Secretary Howard Lutnick ordered all foreign-national access to both models suspended, citing a reported jailbreak flagged by Amazon and NSA reviewers. Unable to verify nationality in real time, Anthropic shut both models down for every customer worldwide. Access came back in stages over the following weeks.

Timeline

9 June 2026Anthropic releases Fable 5 publicly; Mythos 5 stays limited to Project Glasswing partners.
12 June 2026Commerce Secretary Lutnick, citing a reported jailbreak flagged by Amazon and NSA reviewers, orders foreign-national access to both models cut off.
12 to 13 June 2026Unable to verify nationality in real time, Anthropic suspends both models for every customer worldwide.
26 June 2026Lutnick authorizes limited Mythos 5 access for vetted government and partner organizations, after BIS finds "appropriate safeguards" in place.
30 June 2026Lutnick tells Anthropic a license is no longer required, citing the company's coordination commitments.
1 July 2026Fable 5 access is restored globally, across Claude.ai, AWS, Google Cloud, and Microsoft Foundry.

Who meant what, and what happened instead

A rule written for a narrow risk ended up landing on everyone, because the line it drew was one the running system couldn't read in real time.

ActorAuthority heldWhat happened instead
Amazon & NSA reviewers Flag one specific jailbreak vulnerability to Commerce. Triggered a shutdown far broader than the vulnerability they'd actually reported.
Commerce Secretary Lutnick Cut off foreign-national access to that specific risk within days of it being flagged. Because nationality couldn't be checked in real time, took the model down for every customer worldwide, including domestic users and Anthropic's own staff.
Anthropic Comply immediately and keep its other models running unaffected. Absorbed 18 days without its two flagship models, refunded recent subscribers, and became the first company ordered to revoke access to specific model versions by user nationality.
Cybersecurity researchers Use Fable 5 for legitimate defensive security work. Lost access along with everyone else; over 100 researchers publicly objected that the ban was broader than the risk it named.
Commerce (again, late June) Restore access in exchange for Anthropic's coordination commitments: proactive risk reporting, agreed release protocols. Restored it in stages instead of all at once: Mythos 5 to vetted partners first, Fable 5 fully two weeks later.