# Washington pulls two Anthropic models offline by federal order

> US Commerce orders Anthropic to disable Fable 5 and Mythos 5 for all customers by federal letter — the first frontier model pulled offline by directive.

- Published: Saturday, June 13, 2026 (2026-06-13)
- Publisher: nextbig.dev — daily AI & compute briefing, written by Oday Brahem with nextbig.dev's AI agent
- Sources analyzed: 32 articles from 300+ curated accounts
- Canonical URL: https://www.nextbig.dev/daily/2026-06-13

## The Big Story

### Washington pulls two Anthropic models offline by federal order

At 5:21pm ET on Friday, Anthropic received an export-control directive from Commerce Secretary Howard Lutnick suspending all access to Fable 5 and Mythos 5. The order, issued under national security authorities, bars export, re-export, or domestic transfer of the two models to any foreign national — inside or outside the US, including Anthropic's own foreign-national employees. The only way to comply was to disable both models for every customer. All other Anthropic models stay online.

This is the first time a leading lab has yanked a publicly deployed model under direct federal order. Mythos 5 is the high-capability cyber model; Fable 5 was last week's general-use, safeguarded build of the same capability. The trigger, per Anthropic, was government awareness of a jailbreak that routes around Fable 5's guardrails. Anthropic disputes the severity in plain terms: it reviewed a demonstration of the technique, found it surfaced a small number of previously known, minor vulnerabilities, and confirmed other publicly available models find the same ones. To date the evidence has been verbal — essentially asking the model to read a codebase and patch flaws. The WSJ reports Amazon CEO talks with US officials helped trigger the crackdown, which complicates the clean national-security framing.

If you built on either model, you have a production outage with no migration window. Anyone serving Mythos 5 or Fable 5 through Anthropic's API or Bedrock needs a fallback today: route to Claude's remaining models, or to an open-weight option you can run yourself. The lesson for anyone with a frontier model in the critical path is that closed-API capability now carries regulatory tail risk that no SLA covers — a model can be legal Friday afternoon and dark Friday evening, by letter, with no appeal before the switch flips. Build a documented second provider for any capability you cannot afford to lose for a week.

The signal for the next 6-12 months: capability and export control have collided at the deployment layer, not the training layer. Until now the controls hit chips and weights crossing borders. This hits a running endpoint serving paying US customers. Expect more directives naming specific deployed models, and expect labs to pre-segment high-capability cyber models behind license walls rather than ship general-use versions that can be jailbroken back into them. That is precisely the dynamic the anonymous "Open source AI must win" manifesto trending the same day is reacting to: when a few closed APIs hold the capability, a government letter is a single point of failure.

Watch what Anthropic does next. It is not contesting the order, but it is openly contesting the facts behind it — which suggests the company expects to argue Fable 5 back into service once the evidence is examined.

Source: @newsycombinator — https://www.anthropic.com/news/fable-mythos-access

## Compute & Infrastructure

### Google turns retired phones into a low-carbon compute cluster

Google Research proposes reusing decommissioned smartphones as a distributed computing platform, salvaging working SoCs and batteries that would otherwise be e-waste. The pitch is carbon arbitrage: idle silicon already manufactured beats new datacenter capacity for latency-tolerant, low-intensity workloads. Not a replacement for accelerators, but a real angle for edge and batch jobs where embodied carbon dominates the footprint.

Source: @newsycombinator — https://research.google/blog/a-low-carbon-computing-platform-from-your-retired-phones/

### Two consumer GPUs hit 80 tok/s on a 27B model at Q8

An RTX 5080 paired with an RTX 3090 runs Qwen 3.6 27B at Q8 and 80+ tokens/sec. That is production-grade single-user throughput on roughly $2k of mixed-generation hardware, no datacenter card required. With Anthropic models getting pulled by federal letter the same week, the case for keeping a capable local model warm on your own silicon just got more concrete.

Source: @newsycombinator — https://imil.net/blog/posts/2026/rtx-5080-+-rtx-3090-setup-80+-tok-s-on-qwen-3.6-27b-q8/

## Security

### Arch AUR malware contained at 1,579 packages — official repos untouched

The "Atomic Arch" campaign started Thursday at 400 compromised AUR packages and climbed past 1,500 before Arch believed all affected commits were addressed; one cited list puts it at 1,579. Attackers adopted orphaned packages and modified PKGBUILDs that yay and paru execute at install, dropping a rootkit and infostealer hunting credentials, tokens, and SSH keys. Official [core], [extra], and [multilib] were never touched — but CI runners on Arch images that pull from the AUR may have shipped poisoned artifacts downstream.

Source: @newsycombinator — https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500

### 21 zero-days disclosed in FFmpeg

A research dump details twenty-one zero-day vulnerabilities in FFmpeg, the codec library buried under most media pipelines and a quiet dependency in countless AI ingestion stacks that decode video and audio. If you process untrusted media through FFmpeg, this is a sandbox-and-patch weekend, not a Monday item.

Source: @newsycombinator — https://depthfirst.com/research/21-zero-days-in-ffmpeg

## AI & Models

### Amazon CEO's talks with officials helped trigger the Anthropic crackdown

The WSJ reports Amazon CEO discussions with US officials preceded the export-control directive that shut down Fable 5 and Mythos 5. Amazon is Anthropic's largest backer and its Bedrock distribution channel, which makes the reporting awkward and the national-security framing murkier. Read alongside Anthropic's own statement disputing the jailbreak evidence.

Source: @newsycombinator — https://www.wsj.com/tech/ai/amazon-ceos-talks-with-u-s-officials-triggered-crackdown-on-anthropic-models-dcc90578

### "Open source AI must win" manifesto rides the shutdown to the front page

An unsigned single-page position statement argues AI is civilizational infrastructure and access must not depend on closed APIs, shifting terms, or prices set by a handful of companies — warning against "a subscription economy for cognition." No author, no signatories, no data; it is an argument, not a release. Its timing on the same day as the Anthropic shutdown is the whole point: a federal letter just demonstrated the failure mode it describes.

Source: @newsycombinator — https://opensourceaimustwin.com/?share=v2

### GLM 5.2 ships

Zhipu's GLM 5.2 is out, the latest open-weight frontier-class model from a Chinese lab. With US export controls now reaching deployed endpoints, open-weight models you can self-host are the obvious hedge — and the GLM/Qwen line is where that capability increasingly lives. Benchmark it against your current closed default before you need to.

Source: @newsycombinator — https://digg.com/tech/ii9xibgn

## Developer Tools

### Andrew Ng's aisuite gives one interface to many model providers

aisuite offers a unified, OpenAI-style interface across multiple generative AI providers, so swapping backends is a config change rather than a rewrite. Provider abstraction stopped being a nice-to-have the moment a government letter could disable your model overnight — this is the kind of layer that turns a forced migration into a one-line edit.

Source: @github — https://github.com/andrewyng/aisuite

### Running a local coding agent on macOS, and doing it cheaply

Two practical writeups landed together: a step-by-step for setting up a local coding agent on macOS, and a guide to AI coding at home without burning cash on API bills. Both point the same direction — keeping the inference loop on your own hardware for the bulk of agentic work and reserving paid frontier calls for the hard parts.

Source: @newsycombinator — https://ikyle.me/blog/2026/how-to-setup-a-local-coding-agent-on-macos

### Paca: a lightweight Jira alternative built for human-AI collaboration

Paca pitches itself as a stripped-down issue tracker designed for teams where coding agents are first-class participants, not bolt-ons. Worth a look if you are wiring agents into your workflow and find heavyweight project tools fight the loop more than they help.

Source: @newsycombinator — https://github.com/Paca-AI/paca

### Chatwoot keeps climbing as the open-source Intercom alternative

Chatwoot — open-source live chat, email, and omni-channel support desk positioned against Intercom, Zendesk, and Salesforce Service Cloud — is trending again on GitHub. The self-hosted support stack is a steady win for teams that don't want customer conversations living in a vendor's database.

Source: @github — https://github.com/chatwoot/chatwoot

## Startups & Capital

### TensorZero archives its repo — cause unconfirmed

The TensorZero GitHub repo (~11,285 stars, Apache-2.0) went read-only on June 12. The headline frames it as a flameout after a $7.3M seed, but that round was announced in August 2025 and no shutdown post exists — the blog, docs, and CEO's site are still pitching the product. The LLMOps gateway claimed sub-1ms p99 and ~1% of global LLM API spend; an owner archive leaves it forkable. Treat the why — acquisition, rename, relicense, or wind-down — as open.

Source: @newsycombinator — https://github.com/tensorzero/tensorzero

## Quick Hits

- Trump order bars the Census Bureau and BEA from using statistical noise; experts say 2030 redistricting data plans must be "completely redesigned" (@newsycombinator) — https://desfontain.es/blog/banning-noise.html
- EFF warns H.R. 6028 would rush through a disastrous overhaul of the US Copyright Office (@newsycombinator) — https://www.eff.org/deeplinks/2026/06/congress-just-rushed-through-disastrous-copyright-office-overhaul
- Apple migrated its TrueType hinting interpreter to Swift (@newsycombinator) — https://www.swift.org/blog/migrating-truetype-hinting-to-swift/
- Renault details an electric motor that uses no rare earths (@newsycombinator) — https://www.renaultgroup.com/en/magazine/energy-and-powertrains/all-about-electric-motors-with-no-rare-earths/
- IEEE Spectrum argues the computer science degree isn't dead (@newsycombinator) — https://spectrum.ieee.org/computer-science-degree-isnt-dead
- "There is a shadow hanging over this Fable thing" — a skeptical read on the Anthropic shutdown (@newsycombinator) — https://12gramsofcarbon.com/p/tech-things-there-is-a-massive-shadow
- Pancreatic tumour treatment may have revealed a cancer "master switch" (@newsycombinator) — https://economist.com/science-and-technology/2026/06/12/treating-pancreatic-tumours-may-have-revealed-cancers-master-switch
- areweguiyet surveys the state of building user interfaces in Rust (@newsycombinator) — https://areweguiyet.com/#ecosystem

## The Takeaway

Closed-API capability now carries regulatory tail risk: a model legal at lunch can be dark by dinner, with no appeal. If you have a frontier model in your critical path, wire a provider-abstraction layer like aisuite this week, benchmark an open-weight fallback (GLM 5.2 or Qwen) you can self-host, and confirm it runs on hardware you control — two consumer GPUs already do 80 tok/s on a 27B model.

## The Call

Fable 5 — the safeguarded general-use model — comes back online for customers within 60 days, while Mythos 5 stays dark under license.

The case: Anthropic is not contesting the order but is openly contesting the facts, saying the jailbreak surfaces only minor, already-known vulnerabilities that other public models also find. That is a company building a record to argue the safeguarded build back into service. The consensus read treats a federal shutdown as permanent; it is missing that the evidence so far is verbal and narrow.

What proves us wrong: Fable 5 remains fully disabled for all customers on August 13, 2026.

Settles: by August 13, 2026

## The Tape

The market desk's signals from the day's verified wire. Falsifiable analysis, settled in public — not individualized investment advice.

### LONG GOOGL (Alphabet) — medium conviction

The federal kill switch on Fable 5 and Mythos 5 converts Anthropic's launch trust wobble into demonstrated regulatory tail risk for single-provider closed APIs, and Gemini Enterprise — compounding near 40% QoQ on a multi-model Vertex marketplace — is the procurement beneficiary. Updated from the 06-12 long: what changed is the failure mode went from silent fallback to a government de-deployment wi

The mechanism: Anthropic disabled both models for every customer Friday at 5:21pm ET after an export-control directive; Friday's close predated it and Saturday's Amazon disclosure, so Monday is the first repricing. The consensus reads this as Anthropic-specific, but the operational lesson enterprises take is provider abstraction, which favors hyperscaler model marketplaces that sit many models behind one API. Alphabet also holds roughly 14% of Anthropic, so it shares the mark exposure while owning the cleaner distribution upside.

Wrong if: Alphabet's Q2 2026 print shows Google Cloud growth decelerating below ~30% YoY or no acceleration cited in Gemini Enterprise adoption.

Settles: By August 31, 2026 (through the Q2 2026 print)

### WATCH AMZN (Amazon) — medium conviction

Amazon's CEO reportedly triggered the federal action against Anthropic — its largest investee — weeks before Anthropic's targeted October NASDAQ listing, putting a regulatory haircut on the very asset that flattered Amazon's earnings. Q1 2026 booked $16.8B pre-tax from the Anthropic position, including a $12.3B non-cash revaluation; that quality-of-earnings line now carries fresh IPO-mark risk.

The mechanism: WSJ, The Information and Reuters report Jassy flagged Fable 5 cyber risk to Trump officials, setting the export controls in motion. Amazon's stake is marked in the mid-to-high teens of a $965B valuation, implying roughly $135-160B on paper against an $8B cost base. The market reads Amazon's beats as operational; a disputed, competitor-driven directive that dents Anthropic's IPO price would reverse part of that paper gain and invite governance scrutiny.

Wrong if: Anthropic's IPO prices at or above its $965B last mark by October 31, 2026, and Amazon's next 10-Q books another upward Anthropic revaluation with no related markdown.

Settles: By October 31, 2026 (through the Q3 2026 print and Anthropic listing window)

### WATCH Anthropic — medium conviction

The first federal de-deployment of a live frontier model lands six weeks before a targeted October NASDAQ IPO at a $965B mark and $47B run rate. Updated from the 06-12 watch: the trust problem escalated from a 2x-Opus pricing-and-silent-fallback issue to demonstrated, no-appeal regulatory risk that any underwriter must now price into the float.

The mechanism: Anthropic disputes the severity — minor, previously known vulnerabilities other public models surface too — but compliance forced a global shutdown of its best-coding models, and a co-investor's lobbying appears to have driven it. That combination, capability leadership plus single-directive fragility, is precisely the overhang public-market AI buyers underwrite. The capability still wins benchmarks; the deployment durability does not.

Wrong if: Fable 5 is restored to all customers within 60 days and Anthropic prices its IPO at or above the $965B mark by October 31, 2026.

Settles: By October 31, 2026

### WATCH BABA (Alibaba) — low conviction

The wire's one-way read — open source must win, self-host a Qwen fallback — points at Alibaba, which holds over 50% of open-weight download share. The fade: the tailwind is mindshare, not revenue, and a US export-control and copyright-overhaul mood makes Chinese weights a poor fit for the exact regulated, security-sensitive workloads driving the diversification.

The mechanism: The briefing names Qwen as the self-host fallback, and GLM 5.2 shipped the same day, so open-weight mindshare is real. But Alibaba has already closed its flagship Max tier and monetizes through DashScope and Alibaba Cloud, not the open weights, and US enterprises de-risking from a federal kill switch will not standardize critical paths on a Chinese provider. The crowded long here is an instrument mismatch, not a thesis.

Wrong if: A named US-listed enterprise publicly standardizes on Qwen as its Anthropic fallback, or Alibaba Cloud international AI revenue inflects in its next quarterly print.

Settles: By September 30, 2026

---
Cite as: "nextbig.dev Daily AI Briefing, 2026-06-13" — https://www.nextbig.dev/daily/2026-06-13