A Friday letter from Commerce turned frontier-model routing into an export-control problem

Late Friday, June 12, 2026, the Department of Commerce sent a letter to Anthropic imposing export controls on its models Fable 5 and Mythos 5; an approved export license from the Bureau of Industry and Security is now required for any foreign persons, inside or outside the United States, to access the models, and the requirement includes Anthropic's foreign national employees.

The Commerce letter to Anthropic has not been made public, and reportedly cited national security concerns.

Anthropic said it received the directive from the government at 5:21pm (ET) and that the letter did not provide specific details of its national security concern.

The directive is the first known US use of export control authorities to regulate a particular AI frontier model on a national security basis, and it applied not only outside the US but also to foreign nationals inside the country.

Compliance requirements are not limited to direct user logins: companies may be required to implement controls to prevent export of the service via API calls, where model access is embedded in internal tools, autonomous agents, and any system that routes prompts, code or other data to an export-controlled model, and this can extend to deemed exports if foreign national employees, contractors or affiliates can use those models directly or indirectly.

Anthropic disabled Fable 5 and Mythos 5 for all customers rather than attempting to segment access by nationality.

Anthropic described the issue as narrow and stated that it had not received detailed written support for the government's position.

Anthropic said the government has to date only given it verbal evidence of a potential narrow, non-universal jailbreak, "which essentially consists of asking the model to read a specific codebase and fix any software flaws."

The compliance obligations arise not just if Fable 5 access is restored, but also for adoption of any future frontier model that may be determined to present national security concerns.

Anthropic has stated that Fable 5 is a Mythos-class model made available for broader use with safeguards and that Mythos 5 is the same underlying model with certain safeguards lifted; Fable 5 was publicly available to general users while Mythos 5 was a special release with more limited distribution.

Companies that already integrated into Fable 5 may experience service interruption even where their US personnel would not independently present the same access issue.

If internal tools, sales platforms, customer workflows or code-management systems call Anthropic APIs that invoke Fable 5 or Mythos 5, companies may want to identify those integrations and consider disabling, rerouting or otherwise remediating them unless and until lawful access is confirmed.

The ability to issue a letter imposing a worldwide license requirement under the EAR currently only applies to exports, reexports or in-country transfers for WMD activities, US persons activities related to chemical or biological weapons, or exports to a party involved in activities contrary to US national security or foreign policy interests.

ECRA directs Commerce to establish controls on emerging and foundational technologies, including by informing a person that a license is required; that 'is informed' mechanism is not limited by country scope, but the authority has not been implemented by a regulation as required by ECRA.

Anthropic said it disagrees that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people.

Anthropic said it reviewed a demonstration of the specific jailbreak technique being used to identify a small number of previously known, minor vulnerabilities, and that other publicly available models are able to discover them as well without requiring a bypass.

Anthropic said it reviewed a report it believes is the basis of the government's directive and validated that the level of capability displayed there is widely available from other models, including OpenAI's GPT-5.5, and is used every day by the defenders who keep systems safe.

Media reports over the weekend say the White House requested feedback from other companies on the safety of Fable 5, and Amazon's researchers reportedly identified methods that could bypass Fable 5's guardrails.

"If this standard was applied across the industry, we believe it would essentially halt all new model deployments for all frontier model providers."