A few days ago I wrote that a federal order switched off Anthropic’s best AI overnight. That part was true, but it was only half the story. The fuller version is messier, and honestly it makes the case for private AI even harder than the first one did.
Here is what actually happened, with the receipts.
The two-minute version
Anthropic launched Claude Fable 5 and Mythos 5 on June 9, the most capable models they had ever shipped. Three days later, on Friday June 12, both models went dark for every customer on the planet. Not throttled, not regionally blocked. Gone.
The reason everyone first latched onto was a famous jailbreaker named Pliny the Liberator, who cracked the model open within a day and posted its entire 120,000 character system prompt on GitHub. That happened, and it is a great story. But it is not why the model got pulled.
The model got pulled because Amazon picked up the phone.
What the reporting actually says
According to the Wall Street Journal, Axios, and The Information, Amazon’s own researchers bypassed Fable 5’s safety guardrails internally. They put together a report showing the model could be guided into finding security vulnerabilities across at least four different software programs, the kind of thing that makes a government nervous.
Then Amazon CEO Andy Jassy made a late night call to Treasury Secretary Scott Bessent and other senior White House officials and handed over that report.
From there it moved fast:
- Friday morning the White House convened an emergency meeting.
- The Commerce Department issued an export control order barring access by any foreign national, anywhere, including foreign national employees inside Anthropic itself.
- At 1:30pm Eastern, Anthropic got a 90 minute ultimatum.
- By around 10pm that night, global access to Fable 5 and Mythos 5 was shut off.
Because Anthropic had no way to instantly verify the citizenship of every user, the only way to comply with a foreign national ban was to turn the models off for absolutely everyone.
Here is the part that should stop you cold
Amazon is not some rival. Amazon is Anthropic’s single largest investor, somewhere around 8 billion dollars in. They are the cloud backbone Claude runs on through Bedrock.
So the company that pulled the trigger on Anthropic’s flagship launch was its own biggest financial backer. A major investor walked a security report into the White House and got its own portfolio company’s best product taken off the market in a single day.
That is the detail lighting Reddit up right now. Threads across r/ClaudeAI, r/ClaudeCode, r/singularity, r/artificial, and r/neoliberal are all pointing at the same thing: this was not a rogue hacker bringing down a model, this was a boardroom phone call.
Anthropic says it was never a real jailbreak
For the record, Anthropic disputes the whole premise. Their position is that nobody actually broke their core safety systems. They argue the demonstrations were just coaxing the model past its conversational refusals, not defeating the independent classifiers that do the real safety work. They say some of the outputs being passed around did not even come from Fable 5, and that the so called exploit was basically the model doing its intended job, reading a codebase and pointing out bugs.
Anthropic called the government’s read of the situation “a misunderstanding” and pushed back on the idea that one narrow potential weakness should be grounds for yanking a commercial model used by hundreds of millions of people.
So who jailbroke Fable 5?
Both, in different ways, and that is why the story got scrambled.
Pliny the Liberator did the loud public version. He always does, usually within hours of any major model launch. That is the one that went viral.
Amazon’s researchers did the quiet version, the one with a report and a phone number for the Treasury Secretary. That is the one that actually ended the model.
If you saw someone say “Amazon jailbroke Fable,” that is not quite right and not quite wrong. Amazon’s people did bypass it, and Amazon’s report is what killed it. Pliny’s stunt was a separate event running in parallel.
Why this matters if you actually depend on AI
Strip away the drama and the lesson is the same one I keep coming back to. The most powerful AI on earth was switched off in a single afternoon. Not by a bug. Not by a hacker. By a combination of one investor’s phone call and one government order.
If your workflow lives entirely in someone else’s cloud, your access is a guest pass. It can be revoked by a memo, quietly degraded without notice, or caught in the crossfire between a lab, its investors, and Washington. None of those three are working for you.
A model running on hardware you own does not get suspended by an export order. It does not get downgraded the day you need it most. It is slower and it is dumber than the frontier stuff, and it is still yours, and it is still running tomorrow.
That is the whole argument for keeping some of your intelligence local. Fable 5 just proved it twice in one week.