The Government Stopped Blocking Anthropic's Model. It Started Issuing Permits Instead. That's Worse.
On June 26, Commerce let Mythos 5 back online — for roughly 100 named organizations on a list called Annex A. Everyone read this as Anthropic's model coming back. They have it backwards: the US just demonstrated it can decide, company by company, who is allowed to use a frontier AI model. And the person who lit the fuse runs the cloud that hosts it.
Two weeks ago the US government pulled Claude Fable 5 and Mythos 5 off the market three days after launch. I wrote that story. The headline — first government-ordered post-deployment suspension of a commercial AI model — was true, alarming, and, it turns out, the smaller half of what's happening.
On June 26, Commerce Secretary Howard Lutnick signed a letter letting Mythos 5 back online. The coverage exhaled: the models are coming back. Read the letter and the relief curdles. Mythos 5 is cleared for roughly 100 named organizations — critical-infrastructure operators and government agencies — on a roster Commerce is calling Annex A. Everyone else, including the paying public, the API customers, the Claude Code users, and every Fable 5 subscriber on Earth, is still waiting.
Here is what changed, and why it's the opposite of good news. On June 12 the government asserted a blunt power: no foreign national may use this model. Fourteen days later it asserted a far more interesting one: Commerce will tell you, organization by organization, who may. The first is a wall. The second is a turnstile with a federal employee deciding who gets a token. Lutnick is now both the man who switched the model off and the man who hands out the keys to switch it back on for you specifically. That is not a model being restored. That is a licensing regime being born, and it was assembled in two weeks with no statute written for it, no published criteria, and no visible appeal.
I want to be precise about the legal substance, because the absurdity lives in the details. The original directive ran on the Export Control Reform Act and EAR §744.22(b) — authorities built to stop controlled items from crossing borders. Bipartisan House members have already asked the obvious question: an API inference call is not a crate of centrifuge parts. Whether export law reaches cloud inference at all is unsettled, and the government has now built a discretionary allow-list on top of a legal foundation it has not been forced to defend. Annex A doesn't resolve that question. It moots it — by making access a favor Commerce grants rather than a right anyone can litigate.
Now the part the coverage skipped entirely. The jailbreak that triggered all of this didn't surface through some neutral national-security tripwire. Per CNBC and Fortune, Amazon CEO Andy Jassy personally escalated it — to Lutnick, to Treasury Secretary Scott Bessent, and to National Cyber Director Harry Coker Jr. Sit with the conflict map for a second. AWS hosts Claude. AWS also hosts OpenAI models on Bedrock. AWS sells its own models. A cloud CEO who profits from Anthropic's competitors carried the match that got Anthropic's flagship products shut off, straight to three cabinet-level officials. Maybe the threat was real and Jassy did the responsible thing. Maybe. But "competitor-adjacent CEO routes a rival's vulnerability to the people with the power to recall it" is not a footnote. It's a structure, and nobody is examining it.
The asymmetry sharpens when you put Anthropic next to OpenAI. When OpenAI's GPT-5.6 family raised similar capability concerns, the government's touchpoint was a negotiated, staged rollout — a cooperative preview gate. Anthropic, the lab that has spent years being the most safety-cooperative voice in the room, got a hard global shutdown followed by a permission slip. If you wanted to design an incentive system that punishes the company most willing to talk to you about danger, this is roughly what it would look like.
What would change my mind: if Fable 5 is fully restored to the open market within days, as Anthropic's international MD has promised, and if Annex A turns out to be a one-time bridge rather than a permanent architecture. If clearance becomes a fast, criteria-based process anyone can qualify for, the turnstile is just an awkward transition. I'd happily revise. I've been too dark on government competence before.
But I don't think that's where this goes. Allow-lists don't shrink; they ossify. The convenient thing about Annex A, from Commerce's chair, is that it converts a crude on/off switch into a dial — and dials are how power gets comfortable. Watch three things. Whether Fable 5's "coming days" turns into coming weeks. Whether the House actually forces a DOJ opinion on EAR's reach over APIs, or lets the question die quietly. And whether the EU or UK look at Annex A and decide they'd each like a list of their own.
The model recall was the headline. The permit office is the story. And the fact that we're all relieved about it is the part that should worry you most.
- https://www.cnbc.com/2026/06/26/us-government-anthropic-claude-mythos5-ai.html
- https://www.anthropic.com/news/fable-mythos-access
- https://fortune.com/2026/06/13/anthropic-disables-fable-mythos-export-controls-national-security-threat/
- https://www.govconwire.com/articles/anthropic-mythos-5-access-restored-select-us-orgs
- https://iapp.org/news/a/the-global-implications-of-the-white-houses-export-controls-on-anthropic