22OCT

US order pulls Anthropic's top models

3 min read

17:22UTC

The Trump administration ordered Anthropic to bar foreign nationals from Fable 5 and Mythos 5; unable to screen by nationality, the company pulled both models worldwide.

← Back to Iran says it mined Hormuz and hit 7 ships Jump to analysis ↓

ConflictDeveloping

Key takeaway

A single US order pulled two frontier AI models from every European user at once.

The Trump administration ordered Anthropic to block foreign nationals from its two most capable models, Fable 5 and Mythos 5, on national-security grounds. Screening every user by nationality proved technically unworkable, so Anthropic took both models offline for everyone rather than enforce the screen. Axios first reported the order on 12 June, and CNBC, Fortune and Anthropic itself later confirmed it.

Christophe Grudler, a French member of the European Parliament, called the move proof that the US holds "a real kill-switch over essential technologies". A European Commission spokesperson said firms must comply with EU legislation whatever their home government demands. The cut reached inside the bloc's own institutions: the EU Agency for Cybersecurity (ENISA) had been admitted to Anthropic's Project Glasswing government-access programme in April, then lost access to the relevant models within weeks of joining.

Bruegel had already documented that Europe depends structurally on US or Chinese compute despite its sovereignty drive. A single US order cutting off two frontier models for every European user at once is the first working instance of the dependency that analysis described. European enterprises now know the capability they license from an American lab can be revoked by an American agency, not the vendor, and the design of the product cannot stop it.

Deep Analysis

In plain English

Anthropic is an American artificial intelligence company. Its most capable AI models, Fable 5 and Mythos 5, were being used by European businesses, researchers and government agencies. On 12 June, the US government ordered Anthropic to stop letting foreign nationals use these models for national security reasons. The problem was that checking every user's nationality turned out to be technically impossible, so Anthropic switched the models off for all users globally, including Europeans and EU institutions. That included ENISA, the EU's own cybersecurity agency, which had been given special government-level access just two months earlier. The episode showed that access to some of the most powerful AI tools available can be cut off by a single US government decision, with no warning and no EU veto.

Deep Analysis

Root Causes

Anthropic's corporate structure gives the US government a jurisdictional hook that European AI companies lack.

Incorporated in Delaware and receiving US Department of Energy compute allocations, Anthropic is subject to export administration regulations that allow the Commerce Department to restrict model access on national-security grounds without judicial review, a control that does not apply to a French-incorporated Mistral or a German-incorporated Aleph Alpha operating the same model weights on European infrastructure.

The EU's own CADA (Cloud and AI Development Act), adopted on 3 June, mandates that public bodies route sensitive workloads through EU-controlled infrastructure, but left frontier model access unresolved. CADA's public-sector cloud tier was designed around data storage and processing, not model inference, meaning ENISA could route its compute through an EU cloud while the model weights themselves remained under US export jurisdiction.

Escalation

Direction is toward further restriction, not relaxation: the Commerce Department's 27 June partial reversal kept conditions in place rather than fully restoring access, and the 2 August GPAI enforcement deadline gives Brussels a regulatory hook to demand model continuity guarantees that US providers operating under US export control cannot currently give.

What could happen next?

Consequence
European enterprises building regulated AI workflows on US frontier models now have a documented precedent for unilateral cut-off, accelerating the business case for migrating to EU-incorporated alternatives such as Mistral and Aleph Alpha.
Short term · Assessed
Risk
From 2 August, GPAI-regulated enterprises in the EU that relied on Anthropic models could face compliance gaps if a future US order cuts access without the 15-day reversal cycle seen in June.
Short term · Reported
Precedent
The episode establishes that US export controls on AI models operate under the same legal authority as munitions controls, making future restrictions on allied-country AI access legally routine rather than exceptional.
Long term · Assessed

Source Landscape

This story draws on centre-left-leaning sources from United States

United States×2

Primary parallel: In 1996, the US Commerce Department classified strong encryption software as a munition under ITAR, barring export of PGP and similar tools to foreign nationals without a licence.

The policy proved unworkable: source code was printed as a book and exported legally, and the restriction was largely lifted by 2000. Anthropic's nationality-screening failure in June 2026 is structurally identical: algorithmic capability, like cryptographic code, cannot be screened by passport at the access layer.

Counter-parallel: The Wassenaar Arrangement, adopted in 1996 by 42 states to coordinate dual-use technology export controls, successfully restricted EUV lithography machine exports to China for over a decade without a unilateral US override of Dutch licensing. The arrangement worked because it was multilateral and prospective; the Anthropic order failed because it was unilateral and retroactive to existing access relationships.

Consensus view: Andrea Renda at the Centre for European Policy Studies (CEPS) assessed in May 2026 that the EU's frontier-model dependency on US providers created an 'asymmetric compliance obligation': EU enterprises must comply with GPAI obligations from 2 August while the model providers they depend on can be pulled by a unilateral US government order, leaving European buyers in regulatory breach through no action of their own.

Counter-view: The Observer Research Foundation's Bedavyasa Mohanty, writing from New Delhi, argues that Washington's order reflects a defensible national-security calculus: frontier models trained on sensitive data carry export-control logic equivalent to munitions, and allied states accepted similar constraints under ITAR (the International Traffic in Arms Regulations) for physical technology throughout the Cold War.

Key tension: Whether EU enterprise buyers facing the 2 August GPAI compliance deadline can legally demonstrate 'adequate measures' toward regulatory compliance when their primary frontier model provider can be switched off by a foreign government on 15 days' notice.

First Reported In

Update #10 · Digital euro to trilogue; Senate bars CBDC

EU Perspectives· 30 Jun 2026

Read original →

Causes and effects

This Event

US order pulls Anthropic's top models

A US national-security order, not the vendor, removed Europe's access to two frontier models overnight, turning bought AI capability into a revocable licence.

Led to

US partly lifts its Anthropic model curb

The original Anthropic worldwide pulldown is the precipitating event that the US Commerce Department's partial lift on 27 June partially reversed.

Occurred 27 Jun 2026

Read story →

MPs name the UK's sovereignty gap

The Commons committee report names the Trump administration's order barring foreign access to Anthropic's models as its trigger case for the sovereignty-gap finding.

Occurred 7 Jul 2026

Read story →

Different Perspectives

Wang Yi

China's foreign minister and Djibouti's issued a joint communique on 21 October saying the war should not reach the Horn of Africa and stressing free navigation through Bab al-Mandeb. The text names neither Iran nor the Houthis, and Djibouti hosts China's only overseas military base, opposite the Yemeni coast.

Ministry of External Affairs

India's foreign ministry called the attacks on Saudi civilian and energy sites "unacceptable" on 22 October and said they must stop at once. An Indian died at Dammam, Indians were injured there and at Shaybah, and about 4,000 Umrah pilgrims remain stranded by one MP's count.

Iraq

Iraq closed the al-Sheeb crossing with Iran to travellers and trucks from 21 October and said other crossings would close gradually. Unlike September's closure, which ended on a staged timetable, this one has none, and Iran's interior ministry said it received no notice.

Abdel Fattah el-Sisi

Egypt's president said on 21 October that Cairo's support would "defend Saudi territory, and does not include an attack on Yemen". Araghchi warned that Egyptian involvement would further complicate the situation, and Cairo's limit matches the one Ankara set on 8 October against attacking another state's soil.

UK Ministry of Defence

The MoD said on 20 October that RAF Typhoons over Saudi Arabia will not strike the Houthis, but extended tanker support to Saudi operations including against Houthi targets in Yemen. The tanker line sets no limit on strikes, so British aircraft may now refuel Saudi jets on bombing runs.

Turkey

Ankara sent the Mecca Joint Defence Agreement to parliament around 20 October, and its published text treats an attack on one party as an attack on all. Article 16 brings it into force only on the last ratification, so the 5 October invocation in Riyadh could not yet bind Turkey.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.