Claude Fable 5: Model Update, Safety Profile, Benchmarks, and Subscriber Trial Rollout

What

Why it matters

Open questions

• Anthropic acknowledges the updated classifier intentionally blocks some benign uses, and BridgeBench shows Debugging fell from 86.2 to 25.9—but community analysis and real-world projects like Willison's sqlite-utils work suggest the model retains genuine capability.[7][20][10] Will Anthropic publish a technical account distinguishing classifier routing effects from model-level changes?

• The subscription trial ends July 7 with Fable 5 moving to per-usage credits and no timeline given for restoring subscription access—how long will it remain outside standard plans?[12]

• Nathan Lambert argues Anthropic deploys undisclosed filters for frontier AI research tasks that silently reduce capability—will Anthropic confirm, deny, or document these alongside its announced classifiers?[2]

• The export control reversal happened in stages with no public explanation at either step—does the US government have any defined process for reviewing and lifting AI export controls, or were both decisions discretionary?[6][4][5]

Narrative

Timeline

• 2026-06-09: Anthropic launches Claude Fable 5 and Mythos 5 at $10/$50 per million tokens with tiered safety classifiers; Nathan Lambert publishes critique alleging hidden undisclosed filters for frontier AI research tasks. [1][2]
• 2026-06-12: US government issues export control directive suspending Fable 5 and Mythos 5 for all foreign nationals; Anthropic complies but publicly disputes the technical basis. [3]
• 2026-06-27: US government partially reverses the export directive, restoring Mythos 5 access for 'trusted' US companies before a full global reversal. [4][28][5]
• 2026-06-28: GLM 5.2 outscores Fable 5 on Semgrep security benchmark (39% vs 32% F1); OpenAI releases GPT-5.6 Sol at $5/$30 per million tokens claiming 91.9% on TerminalBench 2.1. [14][13]
• 2026-06-29: Dario Amodei tells Congress open-source AI is the real national security threat, framing closed frontier model deployment as the responsible policy approach. [18][19]
• 2026-06-30: US fully lifts export restrictions; Anthropic discloses the triggering jailbreak was replicable by Opus 4.8, GPT-5.5, and Kimi K2.7 and commits to pre-release government access for future frontier models. [21][6]
• 2026-07-01: Subscriber trial begins: Pro/Max/Team/Enterprise users get Fable 5 for one week at 50% of remaining weekly limits; API users excluded at standard pricing. [25]
• 2026-07-02: Anthropic publishes 4-tier cybersecurity classification framework and CJS jailbreak severity scoring; BridgeBench scores collapse: Debugging 86.2→25.9, Refactoring 73.6→38.4. [20][7]
• 2026-07-02: Classifiers route 75% of a $321 coding session to Opus 4.8 ($242 of total cost); community analysis argues router miscalibration rather than model degradation explains BridgeBench drops. [8][9]
• 2026-07-02: Anthropic confirms subscription access to Fable 5 ends July 7, moving to per-usage credits due to capacity constraints, with no timeline for restoring subscription inclusion. [12]
• 2026-07-02: Fable 5 completes 16.1% of remote projects at professional standard, double next-best and up from Opus 4.6's 4.2%. [11]
• 2026-07-03: Simon Willison documents subagent delegation workflow: routing routine tasks to Sonnet/Haiku significantly reduces Fable 5 token consumption while retaining it for judgment-heavy work. [23]
• 2026-07-04: AA-Briefcase benchmark shows Claude Sonnet 5 ranks second only to Fable 5 at roughly 17x lower cost; Meta restricts engineers from using Claude Code and Codex over training data contamination concerns. [15][29][17]
• 2026-07-05: Simon Willison releases sqlite-utils 4.0rc2 built mostly by Fable 5: 37 prompts, 34 commits, +1,321/-190 code changes across 30 files at $149.25; cross-model GPT-5.5 review surfaces two additional P1 bugs. [10][24]

Perspectives

Tensions

• Anthropic argues the export control-triggering jailbreak was low-severity and replicable by multiple commercial models with no unique Mythos-specific uplift; the US government provided no technical rebuttal and lifted restrictions without explanation. [6][3][21]
• Anthropic acknowledges an intentional safety margin that blocks some benign uses; BridgeBench shows Debugging dropped from 86.2 to 25.9 post-redeployment, but community analysis and Willison's sqlite-utils project—where Fable 5 identified a critical transaction bug—argue the collapse reflects aggressive router routing rather than reduced model intelligence. [20][7][8][9][10]
• Nathan Lambert argues Anthropic deploys undisclosed filters for frontier AI research tasks that silently reduce capability—which he calls misalignment—while Anthropic's public documentation describes only its announced cybersecurity and biology classifiers. [2][20]
• At $10/$50 per million tokens, Fable 5 costs 2x GPT-5.6 Sol ($5/$30) and up to 39x GLM 5.2 in tested tasks, while both competitors claim benchmark parity or superiority on specific metrics and Claude Sonnet 5 offers similar agentic performance at roughly 17x lower cost. [13][14][15]
• Dario Amodei told Congress closed frontier deployment is responsible policy because open-source AI is the real national security threat; critics note the Fable 5 episode showed closed-weight models face government controls that open-weight models effectively circumvent. [18][19][3]