18JUN

US order pulls Anthropic's top models

3 min read

10:02UTC

The Trump administration ordered Anthropic to bar foreign nationals from Fable 5 and Mythos 5; unable to screen by nationality, the company pulled both models worldwide.

← Back to Iran deal's first death tests the text Jump to analysis ↓

ConflictDeveloping

Key takeaway

A single US order pulled two frontier AI models from every European user at once.

The Trump administration ordered Anthropic to block foreign nationals from its two most capable models, Fable 5 and Mythos 5, on national-security grounds. Screening every user by nationality proved technically unworkable, so Anthropic took both models offline for everyone rather than enforce the screen. Axios first reported the order on 12 June, and CNBC, Fortune and Anthropic itself later confirmed it.

Christophe Grudler, a French member of the European Parliament, called the move proof that the US holds "a real kill-switch over essential technologies". A European Commission spokesperson said firms must comply with EU legislation whatever their home government demands. The cut reached inside the bloc's own institutions: the EU Agency for Cybersecurity (ENISA) had been admitted to Anthropic's Project Glasswing government-access programme in April, then lost access to the relevant models within weeks of joining.

Bruegel had already documented that Europe depends structurally on US or Chinese compute despite its sovereignty drive . A single US order cutting off two frontier models for every European user at once is the first working instance of the dependency that analysis described. European enterprises now know the capability they license from an American lab can be revoked by an American agency, not the vendor, and the design of the product cannot stop it.

Deep Analysis

In plain English

Anthropic is an American artificial intelligence company. Its most capable AI models, Fable 5 and Mythos 5, were being used by European businesses, researchers and government agencies. On 12 June, the US government ordered Anthropic to stop letting foreign nationals use these models for national security reasons. The problem was that checking every user's nationality turned out to be technically impossible, so Anthropic switched the models off for all users globally, including Europeans and EU institutions. That included ENISA, the EU's own cybersecurity agency, which had been given special government-level access just two months earlier. The episode showed that access to some of the most powerful AI tools available can be cut off by a single US government decision, with no warning and no EU veto.

Deep Analysis

Root Causes

Anthropic's corporate structure gives the US government a jurisdictional hook that European AI companies lack.

Incorporated in Delaware and receiving US Department of Energy compute allocations, Anthropic is subject to export administration regulations that allow the Commerce Department to restrict model access on national-security grounds without judicial review, a control that does not apply to a French-incorporated Mistral or a German-incorporated Aleph Alpha operating the same model weights on European infrastructure.

The EU's own CADA (Cloud and AI Development Act), adopted on 3 June, mandates that public bodies route sensitive workloads through EU-controlled infrastructure, but left frontier model access unresolved. CADA's public-sector cloud tier was designed around data storage and processing, not model inference, meaning ENISA could route its compute through an EU cloud while the model weights themselves remained under US export jurisdiction.

Escalation

Direction is toward further restriction, not relaxation: the Commerce Department's 27 June partial reversal kept conditions in place rather than fully restoring access, and the 2 August GPAI enforcement deadline gives Brussels a regulatory hook to demand model continuity guarantees that US providers operating under US export control cannot currently give.

What could happen next?

Consequence
European enterprises building regulated AI workflows on US frontier models now have a documented precedent for unilateral cut-off, accelerating the business case for migrating to EU-incorporated alternatives such as Mistral and Aleph Alpha.
Short term · Assessed
Risk
From 2 August, GPAI-regulated enterprises in the EU that relied on Anthropic models could face compliance gaps if a future US order cuts access without the 15-day reversal cycle seen in June.
Short term · Reported
Precedent
The episode establishes that US export controls on AI models operate under the same legal authority as munitions controls, making future restrictions on allied-country AI access legally routine rather than exceptional.
Long term · Assessed

Source Landscape

This story draws on centre-left-leaning sources from United States

United States×2

Primary parallel: In 1996, the US Commerce Department classified strong encryption software as a munition under ITAR, barring export of PGP and similar tools to foreign nationals without a licence.

The policy proved unworkable: source code was printed as a book and exported legally, and the restriction was largely lifted by 2000. Anthropic's nationality-screening failure in June 2026 is structurally identical: algorithmic capability, like cryptographic code, cannot be screened by passport at the access layer.

Counter-parallel: The Wassenaar Arrangement, adopted in 1996 by 42 states to coordinate dual-use technology export controls, successfully restricted EUV lithography machine exports to China for over a decade without a unilateral US override of Dutch licensing. The arrangement worked because it was multilateral and prospective; the Anthropic order failed because it was unilateral and retroactive to existing access relationships.

Consensus view: Andrea Renda at the Centre for European Policy Studies (CEPS) assessed in May 2026 that the EU's frontier-model dependency on US providers created an 'asymmetric compliance obligation': EU enterprises must comply with GPAI obligations from 2 August while the model providers they depend on can be pulled by a unilateral US government order, leaving European buyers in regulatory breach through no action of their own.

Counter-view: The Observer Research Foundation's Bedavyasa Mohanty, writing from New Delhi, argues that Washington's order reflects a defensible national-security calculus: frontier models trained on sensitive data carry export-control logic equivalent to munitions, and allied states accepted similar constraints under ITAR (the International Traffic in Arms Regulations) for physical technology throughout the Cold War.

Key tension: Whether EU enterprise buyers facing the 2 August GPAI compliance deadline can legally demonstrate 'adequate measures' toward regulatory compliance when their primary frontier model provider can be switched off by a foreign government on 15 days' notice.

First Reported In

Update #10 · Digital euro to trilogue; Senate bars CBDC

EU Perspectives· 30 Jun 2026

Read original →

Causes and effects

This Event

US order pulls Anthropic's top models

A US national-security order, not the vendor, removed Europe's access to two frontier models overnight, turning bought AI capability into a revocable licence.

Led to

US partly lifts its Anthropic model curb

The original Anthropic worldwide pulldown is the precipitating event that the US Commerce Department's partial lift on 27 June partially reversed.

Occurred 27 Jun 2026

Read story →

MPs name the UK's sovereignty gap

The Commons committee report names the Trump administration's order barring foreign access to Anthropic's models as its trigger case for the sovereignty-gap finding.

Occurred 7 Jul 2026

Read story →

Different Perspectives

Lloyd's Market Association

War-risk underwriters price the Houthis' Red Sea attacks because the group announces its targets in advance, but the unclaimed Damietta drone gives insurers a hit with no author to price against. An attack nobody claims costs shipping more than one that is claimed, since premiums are set against a known pattern, not raw damage.

US Central Command

CENTCOM has announced no strike on Iran since resuming bombing on 30 July within hours of an IRGC salvo on Jordan, and centcom.mil did not respond to requests to confirm any pause. The command has gone quiet before while a larger operation was being weighed, so silence alone proves nothing about what it has or has not done.

Hengaw

Hengaw recorded at least 67 executions in Iran during July, of which the state acknowledged only eight, and reported the 1 August execution of protest detainee Arvin Kheirkhahan at Shahrud with no advance notice to his family. A family's first notice of a death sentence is now usually the instruction to collect a body.

Egypt

Egypt's government asked media on 2 August to report the Damietta attack accurately, named no author, and said no findings will be published before its own investigation concludes. Cairo holds the debris and jurisdiction over an attack on its own soil, and naming a culprit now would pull it into a dispute it has avoided for five months.

Iran's Foreign Ministry

Araghchi called the Hormuz talks with Oman final-stage on 2 August, four days after his own deputy rejected Oman's lane proposal, and denied the Damietta drone strike as an Israeli false flag while two Iranian officials privately claimed it for Tehran. Iran's public position now contradicts itself on both files at once.

Bahrain and Kuwait

Bahraini and Kuwaiti aircraft flew their own strikes on Iranian depots in July with Emirati air cover behind them, and Ynetnews reports some Gulf capitals wanted the 2 August strike to proceed rather than stop. States that have already taken fire see a closing window on Iranian weakness, not a reason to pause.