Being the Best Isn’t the Same as Being Unstoppable

A glowing purple AI brain wired to a physical kill switch, a suited hand reaching to flip it, data cascading into decentralised nodes below

Being the Best Isn’t the Same as Being Unstoppable

In eighteen days this summer, a government switched off the smartest creative AI on earth, watched a market route around it, and quietly switched it back on. If your intelligence lives at the end of someone else’s permission slip, it was never really yours.

On 13 June 2026, the most capable creative-writing models Anthropic had ever shipped — Claude Fable 5 and Mythos 5 — went dark. Not because of a bug. Not because of a data breach. Because the US Department of Commerce signed an export order barring foreign nationals from accessing them, and Anthropic, facing an unworkable compliance problem, pulled both models globally rather than try to build a border checkpoint into an API.

By the following morning, the best in class was simply gone. Everywhere. For everyone. One signature.

Then, on 1 July, it reversed. Anthropic confirmed that Commerce had lifted the controls and access would begin restoring the next day. The models came back exactly the way they left — at the stroke of a pen, on a timetable no user chose and no customer controlled.

Sit with that arc for a second, because it contains the whole argument. The models didn’t fail. The company didn’t fail. The technology was flawless throughout. What failed — twice, in both directions — was the assumption that access to a tool you depend on is a property you own rather than a permission you rent.

This Is Not a One-Off. It’s a Pattern.

If the Fable 5 saga were an isolated event, you could file it under “unusual fortnight” and move on. It isn’t. It’s the middle data point in a line that’s now unmistakable.

Rewind to two weeks earlier. On 26 June, OpenAI previewed GPT-5.6 — its Sol, Terra and Luna models — but not to you. (I wrote about the deeper question that raises in the Five Eyes AI warning.) Access went to “trusted partners” only, at the explicit request of the US government, under a new executive order creating a “voluntary framework” to review frontier models before public release. OpenAI said plainly this gov-gated arrangement “is not their preferred long-term model.” Reporting from the Guardian, Axios and VentureBeat all landed the same week.

Read those two events together and the shape changes. A one-off export ban is an incident. A pre-release government gate on the next frontier model is architecture. We have moved, in a single summer, from “the state can remove a model after release” to “the state sees the model before you do.” That is not a policy footnote. For anyone building a business on top of these tools, it’s a supply-chain risk sitting one executive order away from your P&L.

The CFO Translation

Strip out the cypherpunk romance for a moment and put this in the language of a board pack, because that’s where it actually bites.

You have spent eighteen months embedding a frontier model into your finance function, your customer service, your product. It writes your first-draft board commentary, triages your inbox, drafts your contracts, runs your analytics copilot. On paper it’s a productivity miracle. On the risk register, it’s a single supplier — headquartered in one jurisdiction, subject to that jurisdiction’s export law, reachable only through that jurisdiction’s permission.

Now imagine the Fable 5 event happens to your production model on a Tuesday. No warning. No SLA that covers “sovereign shutdown.” Your workflows don’t degrade gracefully — they stop. That’s not a hypothetical any more; it’s a documented event with a date on it.

A CFO’s instinct here should be the same one you’d apply to a sole-source component supplier, a single-bank treasury, or a one-country manufacturing base: concentration risk. The answer to concentration risk is never “hope.” It’s redundancy, and it’s ownership of the critical path.

The Market Already Answered

Here’s the part that should genuinely reassure operators rather than frighten them: the market didn’t wait for permission. It routed around the blockage before the blockage even lifted.

Ten days after Fable 5 went dark, on 28 June, Sakana AI shipped Fugu and its Fugu Ultra orchestrator — a commercial, non-US answer to exactly this problem. It isn’t a toy. On the benchmarks that matter it went toe-to-toe with the frontier: SWE-Bench Pro 73.7 (ahead of Opus 4.8’s 69.2), TerminalBench 2.1 at 82.1, LiveCodeBench 93.2. Fugu’s whole design philosophy is delegation and resilience — a model that decides whether to answer directly or assemble a team of workers, which is another way of saying it was built to not have a single point of failure.

And notice the timing on the reversal. Commerce lifted the Fable 5 controls on 1 July — after the commercial workaround had already emerged and after capital had started visibly flowing into decentralised alternatives. The state didn’t walk it back out of magnanimity. It walked it back once the market had demonstrated the ban was unenforceable in practice. Water finds the cracks. It always has.

The money agrees. Capital has been pouring into decentralised and sovereign-AI infrastructure — Bittensor’s TAO network, Venice’s VVV, Morpheus’s MOR — with billions in inflows chasing exactly the thesis this summer proved. When roughly $2.87bn moves toward “AI you can’t switch off,” the market is pricing in the risk that your model provider might get a phone call from Washington.

The Cypherpunks Wrote This Script in 1991

None of this is new. It just wears new clothes.

In 1991, Phil Zimmermann released PGP — strong encryption for ordinary people — and the US government responded by treating him as an arms exporter, opening a criminal investigation that dragged on for three years. The state’s position was straightforward: powerful cryptography is a munition, and citizens don’t get to have it without permission. Zimmermann’s position was equally straightforward: privacy is a right that predates the government, and you cannot un-invent mathematics.

He won. Not in a courtroom, exactly — the case was dropped — but in the only arena that mattered: the code got out, it spread, and today the encryption they tried to classify as a weapon secures every banking app and every message you send. The lesson the cypherpunks drew from that fight is the same lesson the Fable 5 fortnight just re-taught: a capability that lives in the open, on hardware you control, cannot be recalled by decree. A capability that lives behind a corporate API in a single jurisdiction can be — and now demonstrably will be.

Hal Finney, Zimmermann, the whole cypherpunk lineage understood that the fight was never really about any specific tool. It was about who holds the off switch.

What Owning Your Intelligence Actually Looks Like

This is not a counsel of paranoia, and it’s certainly not a call to rip out the frontier models — they’re extraordinary, and for most work they’re the right tool. It’s a call for a two-layer posture. The same posture any prudent operator applies to any critical dependency.

Layer one: orchestration and failover. Don’t hard-wire your business to a single provider’s single model. Build an abstraction layer so that when — not if — a model goes dark, your workflows fail over to an alternative. A Fugu-class orchestrator, a second provider, a routing layer that treats models as interchangeable components rather than irreplaceable organs. This is resilience engineering, not ideology.

Layer two: the local lifeboat. Keep a capable open-weights model — running on hardware you own, weights you’ve downloaded, inference that answers to nobody’s export desk — as the floor beneath everything. It won’t be the smartest model in the room. It doesn’t need to be. It needs to be yours, and it needs to still be there on the Tuesday morning when the smartest model in the room has been switched off by someone who never asked your permission. Because, as I put it after the first shutdown, your AI has a kill switch — and it isn’t yours to flip.

The distinction the market is now pricing, and the one your risk committee should be too, is simple: being the best is a benchmark. Being unstoppable is an architecture. They are not the same thing, and this summer proved it with dates and signatures.

The Bottom Line

Fable 5 is back. Access is restoring. In a week most people will have forgotten it ever went away, which is precisely the danger — the lesson evaporates faster than the outage did.

So write it down. On 13 June, one government deleted the best creative AI on earth with a signature and it was dark worldwide by morning. On 1 July, another signature switched it back on. Eighteen days, two pen-strokes, zero input from the millions of people and businesses who depended on it in between.

If that arrangement is acceptable to you, carry on. If it isn’t — if you’d rather your intelligence answered to you than to a permission slip — then the work starts now: an orchestration layer for resilience, and open weights on your own metal for sovereignty. The cypherpunks were right in 1991. They’re still right. The only question is whether you build the lifeboat before you need it, or after.

Related reading on this site: They Built a Mind You Can’t Switch Off — Sakana’s Fugu and the Commercial Birth of AI Sovereignty, They Switched Off a Mind on Friday, and Self-Custody Is Now a Civil Right in America.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *