3SEP

US order pulls Anthropic's top models

3 min read

16:40UTC

The Trump administration ordered Anthropic to bar foreign nationals from Fable 5 and Mythos 5; unable to screen by nationality, the company pulled both models worldwide.

← Back to Iran says it re-mined the cleared lanes Jump to analysis ↓

ConflictDeveloping

Key takeaway

A single US order pulled two frontier AI models from every European user at once.

The Trump administration ordered Anthropic to block foreign nationals from its two most capable models, Fable 5 and Mythos 5, on national-security grounds. Screening every user by nationality proved technically unworkable, so Anthropic took both models offline for everyone rather than enforce the screen. Axios first reported the order on 12 June, and CNBC, Fortune and Anthropic itself later confirmed it.

Christophe Grudler, a French member of the European Parliament, called the move proof that the US holds "a real kill-switch over essential technologies". A European Commission spokesperson said firms must comply with EU legislation whatever their home government demands. The cut reached inside the bloc's own institutions: the EU Agency for Cybersecurity (ENISA) had been admitted to Anthropic's Project Glasswing government-access programme in April, then lost access to the relevant models within weeks of joining.

Bruegel had already documented that Europe depends structurally on US or Chinese compute despite its sovereignty drive . A single US order cutting off two frontier models for every European user at once is the first working instance of the dependency that analysis described. European enterprises now know the capability they license from an American lab can be revoked by an American agency, not the vendor, and the design of the product cannot stop it.

Deep Analysis

In plain English

Anthropic is an American artificial intelligence company. Its most capable AI models, Fable 5 and Mythos 5, were being used by European businesses, researchers and government agencies. On 12 June, the US government ordered Anthropic to stop letting foreign nationals use these models for national security reasons. The problem was that checking every user's nationality turned out to be technically impossible, so Anthropic switched the models off for all users globally, including Europeans and EU institutions. That included ENISA, the EU's own cybersecurity agency, which had been given special government-level access just two months earlier. The episode showed that access to some of the most powerful AI tools available can be cut off by a single US government decision, with no warning and no EU veto.

Deep Analysis

Root Causes

Anthropic's corporate structure gives the US government a jurisdictional hook that European AI companies lack.

Incorporated in Delaware and receiving US Department of Energy compute allocations, Anthropic is subject to export administration regulations that allow the Commerce Department to restrict model access on national-security grounds without judicial review, a control that does not apply to a French-incorporated Mistral or a German-incorporated Aleph Alpha operating the same model weights on European infrastructure.

The EU's own CADA (Cloud and AI Development Act), adopted on 3 June, mandates that public bodies route sensitive workloads through EU-controlled infrastructure, but left frontier model access unresolved. CADA's public-sector cloud tier was designed around data storage and processing, not model inference, meaning ENISA could route its compute through an EU cloud while the model weights themselves remained under US export jurisdiction.

Escalation

Direction is toward further restriction, not relaxation: the Commerce Department's 27 June partial reversal kept conditions in place rather than fully restoring access, and the 2 August GPAI enforcement deadline gives Brussels a regulatory hook to demand model continuity guarantees that US providers operating under US export control cannot currently give.

What could happen next?

Consequence
European enterprises building regulated AI workflows on US frontier models now have a documented precedent for unilateral cut-off, accelerating the business case for migrating to EU-incorporated alternatives such as Mistral and Aleph Alpha.
Short term · Assessed
Risk
From 2 August, GPAI-regulated enterprises in the EU that relied on Anthropic models could face compliance gaps if a future US order cuts access without the 15-day reversal cycle seen in June.
Short term · Reported
Precedent
The episode establishes that US export controls on AI models operate under the same legal authority as munitions controls, making future restrictions on allied-country AI access legally routine rather than exceptional.
Long term · Assessed

Source Landscape

This story draws on centre-left-leaning sources from United States

United States×2

Primary parallel: In 1996, the US Commerce Department classified strong encryption software as a munition under ITAR, barring export of PGP and similar tools to foreign nationals without a licence.

The policy proved unworkable: source code was printed as a book and exported legally, and the restriction was largely lifted by 2000. Anthropic's nationality-screening failure in June 2026 is structurally identical: algorithmic capability, like cryptographic code, cannot be screened by passport at the access layer.

Counter-parallel: The Wassenaar Arrangement, adopted in 1996 by 42 states to coordinate dual-use technology export controls, successfully restricted EUV lithography machine exports to China for over a decade without a unilateral US override of Dutch licensing. The arrangement worked because it was multilateral and prospective; the Anthropic order failed because it was unilateral and retroactive to existing access relationships.

Consensus view: Andrea Renda at the Centre for European Policy Studies (CEPS) assessed in May 2026 that the EU's frontier-model dependency on US providers created an 'asymmetric compliance obligation': EU enterprises must comply with GPAI obligations from 2 August while the model providers they depend on can be pulled by a unilateral US government order, leaving European buyers in regulatory breach through no action of their own.

Counter-view: The Observer Research Foundation's Bedavyasa Mohanty, writing from New Delhi, argues that Washington's order reflects a defensible national-security calculus: frontier models trained on sensitive data carry export-control logic equivalent to munitions, and allied states accepted similar constraints under ITAR (the International Traffic in Arms Regulations) for physical technology throughout the Cold War.

Key tension: Whether EU enterprise buyers facing the 2 August GPAI compliance deadline can legally demonstrate 'adequate measures' toward regulatory compliance when their primary frontier model provider can be switched off by a foreign government on 15 days' notice.

First Reported In

Update #10 · Digital euro to trilogue; Senate bars CBDC

EU Perspectives· 30 Jun 2026

Read original →

Causes and effects

This Event

US order pulls Anthropic's top models

A US national-security order, not the vendor, removed Europe's access to two frontier models overnight, turning bought AI capability into a revocable licence.

Led to

US partly lifts its Anthropic model curb

The original Anthropic worldwide pulldown is the precipitating event that the US Commerce Department's partial lift on 27 June partially reversed.

Occurred 27 Jun 2026

Read story →

MPs name the UK's sovereignty gap

The Commons committee report names the Trump administration's order barring foreign access to Anthropic's models as its trigger case for the sovereignty-gap finding.

Occurred 7 Jul 2026

Read story →

Different Perspectives

China's foreign ministry

Spokesman Lin Jian rejected Treasury Secretary Scott Bessent's 25 August warning that Iranian oil buyers face an "economic D-Day", saying sanctions do not help and that Beijing would safeguard its own rights and interests. China's Iranian crude imports had already halved for unrelated reasons.

Iraq's government and Erbil authorities

Erbil authorities said 10 explosive-laden drones were shot down over the city on 1-2 September with no casualties. Iraq's government condemned the attacks without naming Iran as their source, and neither Washington nor Baghdad confirmed the IRGC's claim to have hit US bases there.

Bahrain Defence Force

The General Command said air defences intercepted several Iranian missiles and drones on 1-2 September and called the use of such weapons against civilians and private property a flagrant violation of international humanitarian law.

Kuwait's Fire Force and foreign ministry

KUNA reported a hostile Iranian drone struck a residential complex in Kuwait City on 2 September; Fire Force spokesman Brigadier General Mohammad Al-Gharib said losses were confined to property. Kuwait's foreign ministry called the attack a clear breach of its sovereignty.

Jordan's Armed Forces

Petra carried a statement that air defences intercepted eight missiles violating Jordanian airspace early on 31 August and 10 of 13 fired on 1 September. The statement named no target and did not address the IRGC's claim to have struck Camp Titin and killed US personnel.

CENTCOM

CENTCOM's 1 September target list named IRGC air defence, radar, maritime and mine-laying sites in Iran but no tanker, after Axios reported anonymous officials describing a Trump-approved "tanker for tanker" drone policy. A CENTCOM spokesman declined to confirm the policy and referred questions to policymakers.