Morning Edition · Friday, July 3, 2026
Fable 5 returns from shutdown with safety classifiers developers say now block ordinary code
Anthropic redeployed the model with retrained safeguards that route flagged requests to Opus 4.8, and users report that benign coding tasks are being blocked.

Anthropic redeployed Fable 5 and Mythos 5 on July 1 after a 19-day period in which United States export controls forced the models offline. The company paired the return with a proposed industry framework for scoring jailbreak severity, developed with Amazon, Microsoft, Google, and other Glasswing partners.
The technical change is narrow but consequential. A classifier layer covers cybersecurity, biology, chemistry, and model distillation, and any trigger can route a request to Opus 4.8. Only the cybersecurity classifier was retrained, and it is now more sensitive, which Anthropic acknowledges flags benign requests more often during routine coding and debugging. The company says the specific attack technique in an Amazon report is now blocked in more than 99 percent of cases, and that it will keep tuning the system to reduce false positives.
The user complaint is about who pays for those false positives. One widely shared post claimed a 321 dollar coding session in which classifiers routed most of the work to the more expensive Opus 4.8, with the cheaper Fable model handling a fraction of it. That figure comes from a single social account and is not independently verified, but the mechanism it describes, silent escalation to a pricier model when a classifier triggers, is confirmed by Anthropic's own documentation.
- If true, who benefits
Anthropic, which restores revenue and satisfies United States export regulators, while automatic rerouting to Opus 4.8 raises the per-session bill customers pay.
- The nuance
The redeployment and the silent-escalation mechanism are confirmed, but the widely shared 321 dollar session comes from a single unverified social account, not measured data.
An open-source-intelligence read of how likely this story is true with its real nuance, not a judgment of any outlet. It assesses the claim, weighing independent and adversarial reporting. How we label confidence.
What this means
Safety gating now has a direct billing consequence, because a false positive does not just refuse a task, it can reroute paid work to a costlier model. For teams budgeting agent runs, classifier sensitivity becomes a cost they cannot see or control, and the tradeoff between security and usability appears on the invoice.
What to watch
- Whether Anthropic shows when a request has been rerouted and lets customers opt out of automatic escalation, which would address the accountability complaint.
- Independent measurement of the false-positive rate on ordinary coding prompts, the number that decides whether the safeguards are calibrated or overbroad.
Observations to monitor, not financial advice.
Synthesized from: Anthropic News · The New Stack · Polylog editors
Part of a tracked trend
AI Labs Gate Access and Face Accountability on Paid-Tier Promises
Over the next 3-6 months, frontier labs tighten who can use their consumer products — ID/KYC checks, usage-limit enforcement — while facing legal and customer pushback over what paid tiers actually deliver.
More from this edition
- Claude Sonnet 5 arrives, and the mid-tier model now outscores Anthropic's own top model on agentic coding
- OpenAI proposes handing the United States government a 5 percent stake, worth about 42 billion dollars
- Google's electricity use rose 37 percent in 2025 as its AI buildout grew faster than the power grid
- BMW puts Figure's humanoid robot on real logistics work at its South Carolina plant
- NVIDIA seeks outside capital to fund the shift from training to always-on inference
- Inference-cost pressure produces both a serving paper and a prompt-stripping trend
- Meta's Brain2Qwerty advances non-invasive brain-to-text, though fidelity limits remain
- Agentic AI led to many new apps, but the Financial Times finds little user traction
- Anthropic releases Claude Science, a workbench that prioritizes workflow rather than a new model
- A cluster of new papers targets the widening gap between agent capability and agent oversight
- Segment Anything quietly powers a consumer app, a marker of promptable vision reaching production