Granted
On June 12th, Anthropic removed access to Fable 5, their most powerful frontier model, citing the United States government’s concern over national security:
“The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees. The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.”
The directive’s logic is national origin. Its impact is not. By Anthropic’s own account, the company could not honor the distinction the order draws — withholding the model from foreign nationals while leaving it running for everyone else — and so it withdrew Fable 5 and Mythos 5 from all customers at once. Whatever line the government meant to draw between citizen and foreigner, the line that was actually drawn was much coarser.
Only two systems went dark, and the two are, in the respect that matters here, a single system. Fable 5 is the version released to the public, with safeguards built into it — the safeguards are the reason it can be released to the public at all. Mythos 5 is the same underlying model with those safeguards removed, and the absence of them is the reason it cannot be, and is instead held back for a small number of vetted institutions. The distance between the two is not a distance in capability. It is a distance in restraint.
This is what makes the government’s stated concern unusual. The capability it objected to was, by most accounts, narrow: the model could be directed to read through a body of code and find its weaknesses. Security engineers do precisely this, deliberately, every day, and Anthropic’s central defense is that its competitors’ models already do it too — that the capability in question is neither rare nor a special advantage. The objection, then, was never really to what the model knows.
What is scarce is permission to operate a capable model without restraint — and permission of that kind is not something a customer can buy.
The unrestrained version moves through a separate channel, one that exists for organizations the government has reason to trust. Entry to that channel is not priced. There is no figure a customer could pay to obtain Mythos 5, because payment is not the mechanism of admission; admission is granted, at the discretion of parties who need not publish the standard they apply and, in this instance, did not. The standard this time was nationality. It might as easily have been a customer’s industry, or affiliation, or some statement already on record. The particular criterion is incidental. The discretion behind it is not.
And what is granted on those terms can be withdrawn on them. That is not a defect in the arrangement; it is the arrangement. A grant is held at the grantor’s pleasure, and on the twelfth of June the grantor’s pleasure changed.
The usual way of describing unequal access to technology puts the vulnerable at the bottom, and usually that is where they are. Here it is not. The free models, the ones most people actually use, were never touched; there is nothing in them worth controlling, and so nothing in them was controlled. The trusted institutions, by the logic of the arrangement, sit inside the circle these controls are built around rather than against. The party that lost something on June 12th was the one in the middle — able to pay for the frontier, not cleared to hold it. Proximity to the controlled thing, without admission to it, is the exposed position. Money carries a customer as far as the wall and no further, and the wall is exactly where the withdrawal falls.
What was done on June 12th can be defended on its own terms. There was a national-security rationale, a contested finding, and a government acting within authorities it claims. Reasonable people will disagree about whether the specific call was right. But it is the precedent that should trouble us. What June 12th established is that the channel can be operated this way at all — that access to the most capable form of a general-purpose tool can be extended or withdrawn at discretion, against a standard no one is required to disclose, on a criterion free to change. An apparatus used once is used more easily the second time. The criterion that was nationality today is not bound to remain nationality tomorrow.
The stakes of that are not abstract, and they are not only about who gets to run a model. As these systems become the decisive input into how work is done — into who can build, analyze, ship, and compete — the question of who holds the unrestrained version stops being a question about software and becomes a question about whose future is permitted to be competitive. A market’s basic promise is that the better operator wins: that you prevail by being good at the thing, not by being in proximity to state authority. Allocate the decisive capability by proximity instead of merit, and that promise is betrayed. Competition goes on below the line, vigorous and real, while above it the order is settled in advance by favor.
That is the line I do not think we should accept, however ordinary the language of national security makes it sound. Proximity to state power should not be the thing that decides whether your future is competitive. A future earned and a future granted are different futures, and a society that stops being able to tell them apart has conceded something it will struggle to recover. The grant can be altered; that is its nature. The danger is not that it was altered on the twelfth of June — it is that we now know it can be, on terms we never get to see.