The Jailbreak that Got Fable 5 Pulled Exists in Every Model · Eigenwise
On Friday, June 12, 2026, at 5:21pm ET, Anthropic received an order from the US government. By that evening, Claude Fable 5 and Claude Mythos 5, the two most capable models the company had ever shipped, went dark for every user on the planet. The official reason was a jailbreak.<br>I am Belgian. Under that order I count as a “foreign national,” which puts Fable off-limits to me because of my passport, not because of anything I ever did with it. I had a whole weekend planned around that model, which is the small and petty thing to be annoyed about.<br>Here is the larger thing. The order means the US government now believes it can reach into a commercial AI product used by hundreds of millions of people and switch it off . Once that is established, the precedent outweighs whatever the jailbreak was.<br>What the Order Actually Says<br>The directive, issued by the Commerce Department, bars access to Fable 5 and Mythos 5 by any foreign national, “whether inside or outside the United States, including foreign national Anthropic employees.” That scope is the important part. It covers any non-citizen anywhere, including Anthropic’s own staff, not only foreign governments or adversary states.<br>A company cannot reliably sort its users by nationality in real time, so the only way to comply was to switch both models off completely. Every other Claude model stayed online. Only the two best ones went dark.<br>The stated trigger was that another company claimed it had jailbroken Mythos. Anthropic complied with the order and disagreed with it in public, which a company under a national-security directive almost never does. It said it disagreed that “the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people,” and warned that the same standard, applied across the industry, “would essentially halt all new model deployments for all frontier model providers.”<br>They are right about that. And the reason they are right is technical.<br>A Jailbreak Describes Every Model Ever Shipped
A large language model does not look up answers. It generates them one token at a time, by sampling from a probability distribution over its entire vocabulary. The last step in that process, the softmax, hands a nonzero probability to every possible next token. Every single one.<br>That has a consequence people keep wishing were not true. No amount of safety training can push the probability of a harmful output all the way to zero. It can push it down, sometimes very far down, but never to nothing. There is always some sequence of words, however strange, that produces an answer it was trained to refuse. A “jailbreak” is just someone finding one of those paths. It is a property of how these systems work. A patch can lower the odds. It cannot reach zero.<br>So “we found a way to jailbreak this model” says nothing specific about Fable 5. It is equally true of GPT-5.5, of Gemini, of every open-weights model sitting on someone’s hard drive, and of every model Anthropic left running on June 12. Anthropic said exactly this: the capability behind the jailbreak is “widely available from other models (including OpenAI’s GPT-5.5), and is used every day by the defenders who keep systems safe.”<br>If a narrow jailbreak were really the bar for pulling a model, there would be no models. On safety grounds, Fable 5 is indistinguishable from the dozens of systems that stayed online. The reason it got singled out lives somewhere other than safety.<br>Why Fable, and Why Now<br>I have two readings, and I think both are partly true.<br>The first is that this is the next move in a fight that started months ago. In February 2026, the Pentagon gave Anthropic an ultimatum: drop your restrictions on mass surveillance and autonomous weapons, or lose all federal contracts. Anthropic refused. The administration ordered federal agencies off its products and labeled the company a national security risk. Hours later, OpenAI announced a Pentagon deal of its own. The lab that said no has been on this administration’s bad side ever since. An export control that happens to disable its flagship fits that pattern cleanly.<br>The second reading is about money, and here I am openly speculating. By Anthropic’s own published benchmarks, Fable 5 beat OpenAI’s GPT-5.5 and even Anthropic’s own Opus 4.8 on hard coding and cybersecurity tests, scoring 80.3% on SWE-bench Pro against GPT-5.5’s 58.6% . A model that strong going dark is worth a great deal to everyone who has to compete with it. I cannot prove any rival picked up a phone to lobby for this, and I will not pretend otherwise. But every competitor had an obvious reason to want Fable gone, and the order handed them exactly that. It would be naive to look away from that.<br>What I can say without speculating is that the official logic does not hold together. This is an administration that wants to sell advanced AI chips to China while...