On Tuesday, you could use it. By Friday, it was gone — not deprecated, not rate-limited, not behind a paywall. Gone. Switched off worldwide by government order, three days after launch.
That is what happened to Anthropic’s Claude Fable 5 and Mythos 5. Anthropic released Fable 5 on 9 June 2026 as the first publicly available “Mythos-class” model — its most capable system yet. On 13 June, the US Commerce Department, in a directive from Secretary Howard Lutnick to CEO Dario Amodei, issued an export control order barring access by any foreign national — including Anthropic’s own foreign-national employees, and even foreign persons standing on US soil. Anthropic said selective compliance was impossible and pulled both models globally.
The stated reason was a narrow “jailbreak” that could surface software vulnerabilities in codebases — a capability Anthropic pointed out that other public models can already do. Whether the order was justified is, for my purposes, beside the point. The mechanism is the point. And the mechanism should worry you.
The first time a government switched off a mind
This is the first time the United States has issued an export-control directive against a large language model itself — not the chips it runs on, not the fabrication tools, not the training hardware. The model. The weights. The thing millions of people were using to write, reason, and code.
We have spent two years arguing about who gets to build frontier AI. We skipped straight past the more important question: who gets to keep it. The answer, as of last Friday, is that you keep it for exactly as long as a government with jurisdiction over the vendor decides you should. That is not ownership. That is a tenancy, terminable at will, with no notice period.
I have written before about AI as an operating layer for how we work. Here is the uncomfortable corollary: if the operating layer lives on someone else’s servers, under someone else’s licence, subject to someone else’s regulator, then you do not control your own tools. You rent them. And the landlord just demonstrated he can change the locks overnight.
Why this is a sovereignty problem, not a tech story
There is a principle worth stating plainly: you cannot have a world in which governments are permitted technology that citizens are forbidden. That asymmetry — the state holds the capability, the individual is denied it — is the precise inversion of how free societies are supposed to work. The whole architecture of liberty assumes that power flows from the individual upward, not the reverse.
We have run this experiment before, and we know how it ends. When Phil Zimmermann released PGP in 1991, the US government treated strong encryption as a munition and opened a criminal investigation into him for putting it in public hands. The argument then was identical to the argument now: this capability is too dangerous for ordinary people. Zimmermann won — not in court, but because the cypherpunks were right that you cannot un-publish mathematics. Encryption became a human right by becoming ungovernable.
Open-weight AI is the encryption fight of this decade. The Fable 5 ban is the equivalent of the munitions classification — the moment the state asserts that a general-purpose capability is its to grant or withhold. And the answer is the same answer Zimmermann, Hal Finney, and the rest gave thirty years ago: take the capability into your own hands, where it cannot be switched off.
The good news: you can actually do this now
Here is what has changed, and why this is not a doomer essay. In June 2026, running a genuinely capable AI model on hardware you own — disconnected from any vendor, any API, any kill switch — is no longer a research project. It is a weekend.
The open-weight models have caught up to a degree that would have seemed absurd eighteen months ago. DeepSeek V4, released on 24 April 2026 under a permissive MIT licence, scores 80.6% on SWE-bench Verified — the highest of any open-weights model, and frontier-adjacent on real engineering tasks. Meta’s Llama 4 70B is the best general-purpose local model for most people. Alibaba’s Qwen 3 (Apache 2.0) punches absurdly above its weight on code. Google’s Gemma 3 is the best fit for Apple Silicon. None of them quite matches Claude or GPT at the very top — intellectual honesty demands I say that — but “not quite frontier and permanently yours” beats “frontier and revocable” in every scenario that matters for resilience.
The tooling is turnkey. Ollama and LM Studio have made local inference a one-line install. You download the weights once; they sit on your disk forever. No government on earth can reach into your machine and disable a file you already hold.
What it actually takes — the hardware ladder
This is where romance meets the bill of materials. Local AI is constrained by one thing above all: memory. The model has to fit. Here is the real ladder, at the 4-bit quantisation most people run:
16GB machine — and I write this on the assumption many readers already own one — runs 13B-class models like Gemma 3 12B or Qwen 3 14B. Good for chat, drafting, summarising. Not frontier, but genuinely useful and completely free. This is the entry point, and you may already be standing on it.
64GB of unified memory gets you into 70B-class territory — Llama 4 70B at usable quality. This is the “frontier-adjacent” tier where local AI stops being a toy.
128GB+ opens the door to the large Mixture-of-Experts models. A Mac Studio M4 Max with 128GB (around £4,000) is the practical sweet spot for serious 70B work. The M4 Ultra with 512GB (£9,500–11,000) is the only single machine that runs a 235B-class model at good quality — Apple’s unified-memory architecture remains the best price-per-gigabyte story in AI, because the GPU isn’t capped at a small slab of dedicated VRAM the way a consumer NVIDIA card is.
The trade-off, stated fairly: a 4090-class NVIDIA card will spit out tokens two-to-four times faster than a Mac — but only for models small enough to fit its 24GB. The Mac runs the big models slowly; the NVIDIA box runs small models fast. For a CFO who wants a private, always-available reasoning engine rather than a benchmark trophy, the Mac is the more sensible buy.
The CFO’s actual calculus
Let me put my finance hat on, because the romance of self-sovereignty has to survive contact with a spreadsheet. A frontier API subscription costs tens of pounds a month and gives you the best model in the world — until the day it doesn’t. A £4,000 Mac Studio is a capital outlay that gives you a permanent, slightly-behind-frontier capability that cannot be revoked, rate-limited, price-hiked, or subpoenaed.
For most day-to-day work, you keep using the best cloud model — I am not a purist, and neither should you be. But the question every business with sensitive data or operational dependence on AI should now ask is the one we ask about every other critical supplier: what is my fallback when this is switched off? If the honest answer is “there isn’t one,” you have a single point of failure that a foreign regulator can trigger. A local model is not the everyday tool. It is the lifeboat. And as a man who has spent enough nights offshore to respect a lifeboat, I would rather own one I never need than need one I do not own.
There is also a privacy dividend that is pure upside. A model running on your own silicon sends nothing anywhere. No prompt logging, no training on your inputs, no data-residency questions, no third party in the loop. For confidential M&A work, tax structuring, or anything covered by privilege, that is not a nice-to-have — it is the only defensible posture.
The window is open now. It may not stay open.
The reason to act before it is too late is that the Fable 5 directive is a precedent, and precedents get reused and extended. Today the target is a frontier closed model and the lever is export control. It is not a large step from there to pressure on open-weight distribution — model registries, hosting platforms, the repositories where weights are shared. Mathematics cannot be un-published, as Zimmermann proved, but distribution can be made inconvenient, and weights you have not yet downloaded are weights a future rule could keep from you.
So the move is simple, and it is the same move the cypherpunks made with encryption: take possession while possession is free and frictionless. Download the weights. Stand up Ollama on whatever machine you already own. Pull DeepSeek, Llama, Qwen, Gemma — they cost nothing and they are yours the moment they hit your disk. If your work justifies it, buy the machine that runs the bigger ones. Build the lifeboat now, in calm water, because you do not provision for the storm once it is on you.
We cannot have a world where governments hold technology they forbid to the people. The only durable answer to that is not a petition or a policy paper. It is a hard drive with the weights on it, sitting on your desk, answering to no one but you.
Mark Hendy is a private-equity-facing CFO who works with technology and governance through Tanous Limited. If your business depends on AI and you have not thought about what happens when access is withdrawn, get in touch.
Leave a Reply