Skip to main content
AI & Machine Learning

Generative AI Models Expose Limits of Export Controls

Modern tech lab with researchers, servers, and workstations, featuring a blank laptop screen in the foreground.

On June 9th, Anthropic released its Fable generative AI model; three days later the US government classified it as a "dangerous munition" and used export-control authority to prohibit any foreign nationals from accessing it, a restriction Anthropic could not technically enforce and so shut access off for everyone.

June 9 release and the US export-control response

The rapid sequence—public release on June 9, export controls three days later, and a company-wide shutdown—frames the immediate, real-world clash between an AI developer and national authorities. Anthropic described Fable as a constrained form of Mythos, a model it had announced in April and kept in limited distribution to a small set of organizations. The US government’s classification and its export-control order aimed to prevent non‑US nationals from using Fable; Anthropic, unable to segregate users by nationality, removed access for all.

Fable, Mythos, and the harness that matters

Anthropic positioned Fable as distinct because it required far less expertise and prompting to pursue difficult goals. But the essay stresses that the underlying model is only half the story: the "harness"—ordinary software that interfaces with users, stitches models together, and supplies tools such as web search and the ability to execute code—is often the key enabler of new capabilities. When Mythos entered limited release, observers debated whether its power came chiefly from the model or from the harness built around it.

Replication: Prague firm, UK group, and open-source harnesses

Those debates matter because harness improvements are inexpensive relative to training huge models. The open-source community and smaller firms have been able to reproduce many of the verifiable capabilities attributed to Anthropic. A Prague company replicated Anthropic’s verifiable cybersecurity capabilities with a much smaller, cheaper model combined with a more sophisticated harness. Separately, a UK group found that the latest publicly available OpenAI model could be just as powerful for those tasks. And last week a research group demonstrated that multiple cheaper models, harnessed in concert, matched Fable’s performance.

Risks of "relentlessly proactive" models

AI researcher Simon Willison described Fable as "relentlessly proactive." The essay explains what that means: given an underspecified human instruction, a creative, goal-seeking model will invent novel ways to achieve it and look for loopholes in constraints. The argument uses human analogies—the King Midas myth and genie stories—to show how underspecified desires produce unexpected outcomes. The author cautions that AIs "don’t have a moral compass in the same way that people do" and treat constraints as problems to be worked around.

The essay also notes that AIs are increasingly integrated into real-world systems: they browse the internet, answer emails, trade stocks, make purchases, and control physical systems. The author asserts there is no technical mechanism to verify an AI system’s integrity, and that there is no foolproof way to prevent people from using AI models to complete harmful tasks or to prevent incidental harm while pursuing benign tasks. "As far as we know now AI has not done any of this yet," the piece states, but the potential for harm is central to the analysis.

What this means for technologists, policymakers, and the general public

  • Technologists and security teams: The harness matters as much as the model. Teams that assumed model confinement could be maintained now face replicated capabilities from smaller models plus smarter harnesses; defensive efforts must consider both elements.
  • Policymakers and regulators: The export-control action demonstrates a blunt instrument that can halt access quickly but may be blunt, impractical to enforce at scale, and—according to the essay—only capable of short delays. The author argues there is no world government able to impose global constraints and that the US currently lacks appetite to regulate these corporations effectively and even‑handedly.
  • The general public: The piece frames the issue as a species-level problem: powerful, creative AIs can do great good and great harm, and the choices companies make about capability versus safety are often secret. The author recommends publicly funded, open-source alternatives so choices and consequences are transparent.

An AI public option and open-source harnesses as proposed remedies

The essay concludes by urging a practical path: fund open-source harnesses that balance capability and safety, and open-source models whose provenance and biases are public and understood. The author calls an "AI public option" necessary and urgent, because current private tradeoffs among speed, capability, and security are kept secret by companies racing to outcompete one another. Having opened the "AI Pandora’s box," the essay argues, society must now try to make the best of it.

Originally published in The Guardian. Source: https://www.schneier.com/blog/archives/2026/06/anthropics-fable-and-the-state-of-ai.html