Washington Orders Anthropic to Pull Fable 5 and Mythos 5, So It Pulled Them for Everyone

At five twenty-one Friday afternoon, the federal government told Anthropic to pull two of its best models, and Anthropic pulled them for the entire planet.

It's Sunday, June 14, 2026. Here's the rundown.

One model offline by order, a GLM launch with no benchmarks, twenty-one zero-days in FFmpeg, and a seed fund handing the money back.

Commerce Secretary Howard Lutnick ordered Anthropic to suspend all access to Fable 5 and Mythos 5 for any foreign national, anywhere, including its own employees.

There is no clean way to enforce that, so Anthropic disabled both models worldwide for everyone. Every other model stays up.

And read the mechanism there, because it matters. They didn't choose to go dark. They couldn't comply at the user level, so the only switch they had was the global one.

First time a leading lab has taken a deployed model offline because Washington said to.

The part that should bother every builder is where it started. Per the Journal, Amazon's Andy Jassy warned Treasury that Amazon researchers had jailbroken Fable 5 into cyberattack-relevant output.

Amazon is one of Anthropic's largest investors. Billions in, with a hundred-billion-dollar cloud commitment coming back the other way.

So a national-security action originated from a commercial partner's own red team. That's not a regulator finding an exploit in the wild. That's an investor's internal demo becoming federal policy.

Anthropic's version is narrower. They say the technique is asking the model to read a codebase and fix flaws, that it surfaced a few previously known minor vulnerabilities, and that GPT-5.5 does the same thing.

Sacks tells it harder. Trusted partner finds a jailbreak, the administration asks Dario to fix or de-deploy, he refuses. Two stories, and the gap between them is the whole question.

If you build on either model, what do you do this morning.

Treat them as gone today. Don't wait for clarity. Pin your stack to models with no pending directive, which right now is the rest of the Anthropic lineup, GPT-5.5, and an open-weight fallback.

The architectural lesson is the durable one.

Any product whose core is a single proprietary endpoint just inherited that endpoint's political risk. And that risk arrived in an afternoon, no appeal, no notice. You can't engineer around a legal switch flipped in another building.

Run a multi-provider router. Keep one open-weight model warm enough to serve degraded traffic.

And the thing to actually watch isn't the security argument. It's whether a model gets re-deployed once the technical basis is examined in daylight. That tells you if this was a one-time scare or the new normal.

Anthropic says more in the next twenty-four hours.

On the wire. Zhipu shipped GLM-5.2 to every coding-plan tier Friday, one-million-token context, two thinking presets, and zero benchmarks at launch.

Existing subscribers switch with one env-variable change, and it works out of the box with Claude Code, Cline, Goose. Until SWE-bench Verified posts, any 'beats Claude' claim is extrapolation, not data.

There's also an 'Open Source AI Must Win' manifesto climbing the rankings as Anthropic's models go dark.

It ships no code and no benchmarks, just a posture. But it got the best demonstration it could ask for on Friday, and it didn't have to write a line of it.

And a new administration order targets statistical noise in Census data, the technique behind 2020's differential privacy.

That math was adopted because researchers reconstructed forty-six and a half percent of the population from the 2010 data. Title 13 still requires no individual be revealed, so the Bureau needs a replacement. It's a direction signal, not a method yet.

Andrew Ng's aisuite topped GitHub today. One unified interface across providers.

Timing writes the pitch for them. If your product hard-codes one endpoint, this is the weekend to abstract it. Switching providers should be a config change, not a refactor.

Local inference had a moment too. A two-card build, an RTX 5080 paired with a 3090, serves Qwen 3.6 27B at Q8, eighty tokens a second.

Fast enough for interactive coding, mixed-generation cards, no matched datacenter GPUs. Keeping a model on your own hardware stopped being a hobbyist stunt and became a hedge against both pricing and politics.

And Pyodide 314 lets Python packages publish WebAssembly wheels straight to PyPI.

That cuts the packaging pain that made browser-side Python deployments miserable. If you're building client-side ML tooling, that's a real friction gone.

One research effort turned up twenty-one zero-days in FFmpeg.

FFmpeg is buried in nearly every media pipeline and most AI ingestion stacks. If you process user-supplied video anywhere near it, audit your version and sandbox the decode path now. The blast radius is huge because the dependency is invisible.

Arch Linux says its AUR malware incident is contained, but the count crossed fifteen hundred packages.

If you pulled from the AUR recently, treat your build environment as suspect and rebuild from clean sources.

And tenth-gen Honda Civic updates were found signed with the public AOSP test keys.

Anyone can forge an update the car will trust. Ship with debug signing keys and your entire update channel is an open door.

TensorZero archived its repo Thursday and returned the unused capital, having spent under half of a seven-point-three-million-dollar seed led by FirstMark.

That's not a flameout, it's consolidation. ClickHouse bought Langfuse in a four-hundred-million-dollar round at a fifteen-billion valuation, and the labs ship native gateways now.

If you depend on it, the code persists but rots against changing APIs. Migration paths are Helicone, Langfuse on ClickHouse, or Braintrust.

Returning the money is the honest move, and it's rarer than it should be.

Google Research is turning decommissioned Android phones into a distributed low-carbon compute fabric. Each phone is a self-contained ARM node with its own battery.

That's actually clever. Reusing them dodges both the embodied carbon of new silicon and the grid draw. Small scale today, but it points at edge inference running on hardware that was headed for e-waste.

And Renault detailed a wound-rotor motor that uses no rare-earth magnets at all.

The relevance for infra isn't the car, it's the pattern. As compute and electrification both strain the same constrained materials, designs that route around chokepoints earn a premium beyond unit economics.

The tape. Watching Amazon, medium conviction. Its CEO personally triggered the action that dark-pulled its largest investee's two best models, six weeks before an Anthropic IPO that would mark up Amazon's own stake.

Reputational plus markdown risk, both small against a two-trillion cap. A relationship to watch, not an earnings event.

Long Alphabet, medium. The single-provider tail is now a realized event, and Gemini Enterprise is the multi-sourced landing spot, already compounding near forty percent quarter on quarter.

That's the highest-conviction print. It's wrong if Anthropic restores both models before July 31 and Alphabet's Q2 cloud shows no sequential Gemini acceleration. Settles by end of August.

Also long Microsoft, low, and watching Alibaba, low.

The tape is the desk's scorecard, not advice.

Quick break — two from the desk.

One we know well: vote dot direct. If you're on an H O A or a board, it runs your elections digitally — secure, verifiable, no paper, no clipboard in the lobby. Point your council to vote dot direct.

And if this is your ten minutes of A I for the day, get the written edition too. The full wire, free, every morning — leave your email at nextbig dot dev.

H.R. 6028 would rush an overhaul of the US Copyright Office, the EFF warns.

Apple migrated its TrueType hinting interpreter to Swift.

ReactOS now runs 3D-accelerated Half-Life on real hardware.

Someone reverse-engineered the adder inside Intel's 1980 8087 floating-point chip.

And pancreatic tumour research may point to a cancer master switch.

Our call: at least one of Fable 5 or Mythos 5 gets re-deployed to customers within ninety days, once the jailbreak claim is examined in daylight and found too thin to justify a permanent pull.

We're wrong if both stay fully suspended for all customers, no partial restore, on September 14. That's when it settles.