How the US vs. Anthropic Standoff on Claude Fable Will End<br>← Back to Research<br>On June 12, 2026, the US government forced a deployed, commercial, frontier AI model offline, Anthropic's three-day-old Claude Fable 5. As I write this on the afternoon of June 18, Fable is still unavailable, and the DC talks have just shifted toward setting broad AI security rules.

I wanted to forecast when Fable will return. (We at FutureSearch got a lot of evals and projects out of it, and it is really an amazing model.) But it all hinges on why it was pulled in the first place. Was it a sincere but mistaken panic over a capability that turns out to be ordinary? Is the model genuinely dangerous in a way the public record does not yet show? Is the real worry that an adversary got access? Or is it all politics?

My best guess is politics, but I'm very uncertain, and put nontrivial probability weight on all four scenarios. So to forecast the outcome, I had to research all of them. Here is my view:

Even though "it's just politics" is my #1 hypothesis, I had to give over 50% of the probability to the other 3 scenarios. The rest of the piece goes through these scenarios one by one. Then I produce my unconditional forecast of what will happen by summing up all the possibilities.

A companion piece, The Claude Fable ban barely changes Anthropic's IPO timing or valuation, works the financial impact. This one is about the dispute itself.

What happened

I'll describe what happened only briefly, with this summary timeline, as there are plenty of other sources on what happened when.

Anthropic launched a new top tier above Opus, Sonnet, and Haiku. Mythos 5 is the most capable of the two and was kept tightly restricted: Anthropic's own red-team reporting describes a model that can autonomously find and exploit zero-day vulnerabilities across major operating systems and browsers (red.anthropic.com). Fable 5 is the guardrailed public version of that capability, with safety classifiers meant to block the high-risk cyber and bio territory.

On June 11, Amazon's Andy Jassy escalated a security finding to Treasury Secretary Scott Bessent. Within roughly a day, the matter ran through an NSA review and the National Cyber Director, Sean Cairncross, and on June 12 at 5:21pm ET, Commerce, through a Bureau of Industry and Security "is-informed" letter under the Export Control Reform Act, ordered Anthropic to bar all foreign nationals from both models (Politico). The stated trigger was a "narrow, non-universal jailbreak," reportedly a prompt that asked the model to read a codebase and fix its flaws, which surfaced a handful of previously known minor vulnerabilities (Snyk). I am going to treat it as established, as most of the security community does, that this particular trigger is not a genuine novel vulnerability. It is ordinary dual-use behavior that peer models like GPT-5.5 also exhibit. (This doesn't mean the model isn't dangerous, though.)

Anthropic complied, called the action a misunderstanding, and went into daily negotiations. As of June 18 the public picture is a hard one. The White House is demanding two things before it will lift the order: a full accounting of the roughly fifty to a hundred and fifty entities that had been given Mythos access through Anthropic's "Project Glasswing" program, and guardrails that are close to "jailbreak-proof," a standard cybersecurity experts consider technically impossible (Wired). At the G7 summit on June 16 and 17 the administration refused allied carve-outs, calling them "completely illogical." Commerce has signaled that even the safer Fable's return is "contingent upon fully resolving the jailbreak concerns" (Wired). By the afternoon of June 18 the picture had softened. After talks collapsed the previous Friday, when Anthropic refused a demand to de-deploy Fable, a week of in-person meetings led the two sides, represented for Anthropic by policy head Sarah Heck and co-founder Tom Brown, to begin building a shared framework to grade the severity of jailbreaks and guide any government response, with the administration now conceding that no model can be made completely jailbreak-proof (Politico). The controls were not lifted, and a resolution was reported to be a ways off.

It's important to state that this did not come from nowhere. Anthropic had refused to let the Department of War use its models for some uses it would not name, and in February the administration designated the company a "supply chain risk." Anthropic sued, and a federal judge granted a preliminary injunction, calling the government's move "Orwellian" (Anthropic PBC v. U.S. Department of War). The government appealed. The June order lands in the middle of that ongoing feud and just after Anthropic filed confidentially for a roughly $965B IPO. Second, the legal vehicle is novel and contested. Treating remote access to a hosted model as a "deemed export" of the model to foreign persons stretches export law in a way scholars call possibly...