Version 2

What

Why it matters

Open questions

• Anthropic says the updated classifier blocks the reported jailbreak in over 99% of cases, but BridgeBench shows Debugging scores fell from 86.2 to 25.9 — will Anthropic publish a technical account of what tradeoffs were made?[9][8]

• The export control reversal happened in stages (partial for trusted US companies first, then full global) with no public explanation at either step — does the US government have any defined process for reviewing and lifting AI export controls, or were both decisions entirely discretionary?[6][4][5]

• Anthropic says it intends to restore Fable 5 to subscriptions once capacity improves but gave no timeline — how long will it remain pay-per-use after July 7?[11]

• Nathan Lambert argues Anthropic uses undisclosed filters for frontier AI research tasks (pretraining pipelines, ML accelerator design) that silently reduce capability — will Anthropic confirm, deny, or document these classifiers?[2]

Narrative

Timeline

• 2026-06-09: Anthropic launches Claude Fable 5 and Claude Mythos 5 at $10/$50 per million tokens with tiered safety classifiers and restricted biomedical/cyber research access under 30-day data retention. [1]
• 2026-06-09: Nathan Lambert publishes critique alleging Anthropic uses hidden, undisclosed filters for frontier AI research tasks alongside its announced classifiers, calling covert capability reduction a form of misalignment. [2]
• 2026-06-12: US government issues export control directive suspending Fable 5 and Mythos 5 for all foreign nationals; Anthropic complies but publicly disputes the technical basis and process. [3]
• 2026-06-25: Zhipu AI's open-source GLM 5.2 publicly compared against Fable 5, claiming competitive coding and design arena performance under an MIT license. [25][26]
• 2026-06-27: US government partially reverses the export directive, restoring Mythos 5 access for 'trusted' US companies before a full global reversal. [4][27][5]
• 2026-06-28: GLM 5.2 outscores Fable 5 on Semgrep security benchmark (39% vs 32% F1); OpenAI releases GPT-5.6 Sol at $5/$30 per million tokens claiming 91.9% on TerminalBench 2.1. [15][14][13]
• 2026-06-29: Dario Amodei tells Congress open-source AI is the real national security threat, framing closed frontier model deployment as the responsible policy approach. [16][17]
• 2026-06-30: US fully lifts export restrictions; Anthropic redeployment announcement discloses the triggering jailbreak was replicable by Opus 4.8, GPT-5.5, and Kimi K2.7, and commits to pre-release government access for future frontier models. [7][18][6]
• 2026-07-01: Subscriber trial begins: Pro/Max/Team/Enterprise users get Fable 5 for one week at 50% of remaining weekly limits; API users excluded at standard pricing. [19]
• 2026-07-01: HTML5 physics benchmark shows Fable 5 winning on quality but costing $3.12 vs GLM 5.2 at $0.08 and Opus 4.8 at roughly one-sixth the price. [20]
• 2026-07-02: Anthropic publishes 4-tier cybersecurity classification framework and proposed CJS jailbreak severity scoring system; launches HackerOne bug bounty for cyber jailbreaks. [8]
• 2026-07-02: BridgeBench scores for redeployed Fable 5 collapse: Debugging 86.2→25.9, Refactoring 73.6→38.4, Hallucination resistance 75.9→61.7. [9]
• 2026-07-02: Reports of classifiers routing 75% of a $321 coding session to Opus 4.8 ($242 of total cost) despite routine coding work. [10]
• 2026-07-02: Anthropic confirms subscription access to Fable 5 ends July 7, moving to per-usage credits due to capacity constraints, with no timeline for restoring subscription inclusion. [11][24]
• 2026-07-02: Zvi Mowshowitz reports Fable 5 completes 16.1% of remote projects at professional standard, double next-best and up from Opus 4.6's 4.2%, with remote work automation up roughly 4x in five months. [12]
• 2026-07-02: Developer community and Fast Company coverage reports widespread frustration with classifier over-triggering on legitimate coding and security tasks. [21][22]

Perspectives

Tensions

• Anthropic argues the export control-triggering jailbreak was low-severity and replicable by Claude Opus 4.8, GPT-5.5, and Kimi K2.7 with no unique Mythos-specific uplift; the US government provided no technical rebuttal and lifted restrictions without explanation. [6][3][7]
• Anthropic acknowledges an intentional 'safety margin' that blocks some benign uses; BridgeBench data shows Debugging scores dropped from 86.2 to 25.9 post-redeployment, and at least one user documented classifiers routing 75% of a routine $321 coding session to Opus 4.8. [8][9][10]
• Nathan Lambert argues Anthropic deploys undisclosed filters for frontier AI research tasks that silently reduce model capability—which he calls misalignment—while Anthropic's public documentation describes only its announced cybersecurity and biology classifiers. [2][8]
• At $10/$50 per million tokens, Fable 5 costs 2x GPT-5.6 Sol ($5/$30) and up to 39x GLM 5.2 in tested tasks, while both competitors claim benchmark parity or superiority on specific metrics. [13][20][15]
• Dario Amodei told Congress closed frontier deployment is responsible policy because open-source AI is the real national security threat; critics note the Fable 5 export control episode showed closed-weight models face government controls that open-weight models effectively circumvent. [16][17][3]
• Benchmark authority is contested: Fable 5 leads CursorBench and HTML5 physics quality tests, GPT-5.6 Sol leads TerminalBench 2.1, BridgeBench shows Fable 5's post-redeployment coding scores collapsed, and GLM 5.2 leads on Semgrep security. [24][14][9][15]