US order cuts access to Claude

A company in Dublin, Berlin or Amsterdam can finish work with an AI system running properly and return the next morning to find the integration dead, even where its own use is lawful, local and ordinary. That is the lesson from the US directive that led Anthropic to suspend access to Claude Fable 5 and Claude Mythos 5 after an export-control order covering foreign nationals, including foreign-national employees inside Anthropic itself, according to the company’s account and subsequent reporting by Bloomberg.

The border moved into the API

Export controls used to be tangible enough: a machine part, a chip, a container stopped before it left port. This case applies the same idea to a live AI capability. The model access becomes the controlled item. The checkpoint is no longer a customs post, but a login, an enterprise account or an internal permissions list.

That is why the order reaches beyond the two Anthropic products affected. The Federal Register’s AI diffusion framework had already shown Washington moving towards treating advanced AI artefacts as objects of export control, even if legal analysis suggests the policy landscape later became more fragmented and parts of that framework were paused or pulled back. The Anthropic episode looks less like a settled general regime than a targeted Commerce/BIS intervention.

The sharpest legal idea is "deemed export". In US logic, giving controlled technology to a foreign national inside the United States can count as an export to that person’s country. Anthropic said the directive covered foreign nationals both inside and outside the US. Reuters-syndicated reporting said a US official confirmed a Commerce Department export-control directive, while Anthropic disputed the technical basis, describing the concern as a narrow, non-universal jailbreak issue.

Europe’s real exposure is continuity

For European users, the immediate damage was limited: Anthropic said other models remained available. The wider precedent matters more than the outage itself. If a bank, ministry, research institute or cyber team builds a workflow around a single US frontier model, the weak point is not only data protection. It is whether the service will still be there tomorrow.

Changing models is not like changing a plug. Prompts, guardrails, quality checks, audit trails, staff habits and contractual assurances all grow up around the model. German coverage put the risk in these practical terms: abrupt productivity loss, fragile procurement, migration costs and research disadvantage for teams without their own frontier systems, as Handelsblatt and Fraunhofer FOKUS both stressed.

France read the episode through sovereign cloud and public-sector resilience. The problem is not solved by putting servers in Europe if the model, API and provider remain subject to a foreign legal order, as Le Monde and Le Grand Continent argued. Dutch analysis narrowed the claim usefully: the hard facts concern Anthropic’s statement and confirmed US action, not a general shutdown of US AI for Dutch or European users.

Ireland shows the commercial tension clearly. The State hosts major US tech operations and is putting money into AI research, including the Rinn AI centre inside a wider Research Ireland network. But hosting talent and capital is not the same thing as controlling access to frontier models. Europe can be a major AI customer, regulator and research base while still depending on a switch held somewhere else.

The security case is plausible. The process is opaque.

There is a real national-security argument here. Anthropic described Mythos as a highly capable model for cybersecurity and biology research, with access limited to vetted partners, and said Fable was derived from the same underlying system with safeguards for wider use. BBC reporting cited outside experts pointing to strong cyber performance in UK AI Security Institute testing, which makes the dual-use concern credible.

But a credible risk is not the same as public proof. The actual Commerce/BIS letter has not been published. Sources reviewed by NBC and Axios did not provide the statutory citation, export classification, licensing standard or technical dossier behind the alleged jailbreak. Anthropic said the government had not supplied specific written details and had offered only verbal evidence of a narrow, non-universal vulnerability.

That leaves European governments and companies with an awkward planning problem. The US may have acted on a serious risk. It may also have set a precedent in which access to frontier AI can be suspended through an opaque order, with allies discovering the operational meaning only after systems go dark.

The next test is whether this can be made governable. Washington should clarify the legal route, licensing conditions, allied exemptions and technical threshold for restoring access. European buyers should map which public and private workflows depend on one foreign-controlled API, require portability and exit clauses, and build fallback routes before the next outage.

The lasting implication is not that Europe should wall itself off from US AI. It is that frontier AI has stopped behaving like ordinary software-as-a-service. For any critical European system, access is now a geopolitical dependency, not just a subscription.