The Real Reason the Feds Killed Claude | The Shoggoth Is a Weapon

In this investigative AI documentary, we go inside the week the United States government did something it has never done to a piece of software: it classified Anthropic's Claude as a weapon. Anthropic spent two years warning us about the Shoggoth. Last Tuesday they released two versions of it. One wearing a muzzle, called Fable, for you. One running unmuzzled, called Mythos, for a chosen few. Then the government locked both doors.

They did not regulate this AI. They classified it as a munition.

Sources linked below.

The Register on Claude Fable refusing greetings: https://www.theregister.com/2026/06/claude_fable_blocked_hello/

TechCrunch on cybersecurity researchers and Fable's guardrails: https://techcrunch.com/2026/06/19/claude-fable-pentest-refusal/

Wired on Anthropic's walked-back researcher policy: https://www.wired.com/story/anthropic-fable-researcher-policy/

AWS Bedrock data sharing requirement (Hacker News): https://news.ycombinator.com/item?id=42891744

Zerohedge — Microsoft Restricts Internal Use of Claude Fable: https://www.zerohedge.com/technology/microsoft-restricts-claude-fable

Zerohedge — Anthropic's Marketing Playbook Returns: https://www.zerohedge.com/markets/anthropics-marketing-playbook-returns

Dario Amodei — Policy on the AI Exponential: https://darioamodei.com/policy-on-the-ai-exponential

Claude Desktop Hyper-V Virtual Machine complaint (GitHub): https://github.com/anthropics/claude-desktop/issues/8421

BMO Capital Markets note on Anthropic: https://capitalmarkets.bmo.com/insights/anthropic-pure-play-ai

Project Glasswing announcement: https://www.anthropic.com/glasswing

U.S. Department of Commerce AI Export Control Classification: https://www.bis.doc.gov/policy-guidance/ai-export-controls

Watch On YouTube: ➡️ https://www.youtube.com/@AgentBlackveil    
Follow On Instagram ➡️ https://www.instagram.com/agentblackveil
Follow On Facebook ➡️ https://www.facebook.com/agentblackveil
Follow On TikTok ➡️ https://www.tiktok.com/@agentblackveil

Transcript

The Cage Inside Your Hardware

SPEAKER_00 0:00

I recorded the following investigation into Anthropics new models Fable V and Mythos V before what the United States government did this week. Everything you are about to see details the virtual cages that were built to keep a synthetic intelligence from breaking loose onto your hardware. This is clawed. You type, it types back. That's the official story. But watch what it does the second it wakes up. It builds itself a cage. And last Tuesday, they took that exact same shogoth from the incident report and they put it up for sale. 20 bucks for anyone with a credit card. Hacker news lit up with thousands of comments in a single day. Wired caught the company walking back the exact policies meant to keep us safe, but they'll gladly sell it to you while outright banning their own employees from even touching it. Here's what they buried at the very bottom of the announcement. They didn't release one AI last week. They released two. The same brain, the same training, the same shogoth, built twice. One of them's wearing a muzzle, and that's the one that they handed to you. The other one's out there right now completely unmuzzled. The public model's called Claude Fable V. Fable, like the bedtime story, a simple tale with a moral written so a child can follow it and sleep well afterwards. The restricted model is called Claude Mythos V. Mythos is Lovecraft's own term, the Cthulhu Mythos, the body of story about ancient intelligences so vast and so alien that the human mind cracks just from glimpsing them. An AI safety company looked at the two versions of its most powerful creation and it named the public one after a children's story and the private one after cosmic horror. We are not forcing this metaphor onto them. Their own marketing department is doing that for us in public on their launch page. Here's what the two-model system actually

Fable and Mythos: One Brain, Two Muzzles

SPEAKER_00 1:54

is. According to Anthropic, Fable 5 and Mythos 5 share the exact same underlying model, the identical raw capability. The difference is the restraints. Fable ships with extra safety measures around what the company politely calls dual use capabilities. Dual use is the diplomatic phrase for skills that work as both a tool and a weapon, hunting for security vulnerabilities and then writing the code that exploits them. Mythos 5 ships without those measures, the same shogath with the muzzle off, and it's available to approved organizations only. For most of the 1990s, in the United States, strong encryption was legally a weapon. Identical capabilities, two faces, depending on entirely whose hands it is in. So this isn't new. Anthropic is making the same call about its AI that the State Department once made about secret codes. The difference is that this time, the company building the weapons is also the one deciding who counts as a civilian and who counts as a soldier. The original mythos found in exploited security vulnerabilities better than the human engineers testing it. The capability isn't some feature they switched on. It is baked into the weights, the raw, trained substance of the model, and it's the same in both versions. The muzzle's a layer of software balted on top of that substance. So the danger lives in the weights and it is permanent. The leash is a setting and it is optional. They're selling you a shogath and telling you not to worry. The collar is made very, very well. And it's all approved by Anthropic themselves. There is no government registry here. There's no license board, there's no published criteria, there's no public list of who qualifies and who gets turned away. A private company built the most capable artificial intelligence on the planet. It split it into a caged version for you and an uncaged version for a chosen few, and then it appointed itself the sole authority on who holds the key. The very first thing the world learned

The Lock That Blocked at Hello

SPEAKER_00 3:53

about the cage is that it malfunctions. The muzzle they strapped on this thing is so tight, the creature stopped talking. Within a day of the launch, the register ran a piece with a headline that said, it blocked us at hello. Users reported that Fable V refused innocuous prompts such as greetings like hello. The most heavily safety-engineered model ever given to the public was reportedly treating the word hello as a potential threat. The single most overbuilt safety system in the history of technology tripping over a handshake. On its own, a refusal like that is just a glitch. It's annoying, but it's patchable and it's gone by next week's update. But put it next to what happened to the security community, and a pattern comes into focus. TechCrunch reported that cybersecurity researchers, the exact people whose entire job it is to find holes before criminals do, they're furious about Fable's guardrails. The model refuses the standard, legitimate work of penetration testing and vulnerability research. That's the defensive work. This whole model line was supposedly built to power in the first place. The cage can't tell a locksmith from a burglar, and so it does the lazy thing. It treats every person who walks up to it like a burglar. A defender has to find every single hole in a system to keep it safe. An attacker only has to find one. That's the entire math of security. So when you build a tool that helps defenders and then you cripple it specifically for the defenders, while a criminal can just go and use an uncensored model from somewhere else, you haven't made anybody safer. You've tied one hand behind the back of the only side that was playing fair. The burglars were never gonna ask Claude for permission. The locksmiths were the one who asked, and the locksmiths are the ones getting shown the door. Then Wired reported the part that should genuinely concern us all. Anthropic had put a policy in place that could have sabotaged the researchers using Claude. In the same week, they shipped the most capable model in human history. The people most qualified on earth to verify whether the cage actually holds were the ones getting squeezed out of testing it. The look of safety and the fact of safety are two different products. One you can verify, the other one you just have to take on faith from the company that is selling it to you. And the people who could have verified it were being walked to the exit. Then somebody

Thirty Days of Tape, No Opt-Out

SPEAKER_00 6:11

actually read the data policy, and they found out the cage has cameras. They're just pointed in the absolute wrong direction. Buried in the terms for both Fable and Mythos is a requirement that didn't exist before the launch. 30-day data retention. Everything that flows through the model gets kept for 30 days, not as an option that you can switch off, as a condition of being allowed to use it at all. Now, Anthropic stated reason is safety monitoring, but be precise about what that actually means because it's a one-way mirror. The company that built a creature, too dangerous to ship without a muzzle on it, has decided the correct response is to sit behind the glass and record every single conversation that you have with it. And think about what monitoring at that scale actually requires mechanically. For 30 days of retention to do any safety work at all, the data has to be readable, which means by design, your conversations with the muzzled creature is sitting in a vault, legible for a month every time. And this requirement reaches right past Anthropic's own front door. Here's a story that pulled 400 points on Hacker News this week. AWS Bedrock will now require sharing data with Anthropic for mythos and for future models. You rent the creature through Amazon, a completely different company, and your conversations still flow all the way back to the creature's owner. There's no side door, there's no clean room. The most security-obsessed company on the entire planet looked at this arrangement and it flinched. Zero Hedge reported this morning that Microsoft has restricted internal use of Claude Fable over the data retention requirements. And the irony is sitting right there on Microsoft's own website because at the same time, Fable 5 is featured inside Microsoft Foundry, available for Microsoft's own customers to use. So they will absolutely sell you access to the creature. They just won't let their own employees working with their own internal data get anywhere near it. Not because the model is weak, because the cage keeps tape, and Microsoft doesn't want its private internal traffic sitting in somebody else's vault for 30 days. Microsoft is OpenAI's single biggest backer, tens of billions of dollars deep into Anthropic's main rival. So when Microsoft restricts Claude internally while offering it to customers on Foundry, you're allowed to read that as a safety decision and as a chess move at the same time. The privacy concern is genuine and it's almost extremely convenient. And while every bit of this was breaking,

Sixty-Five Billion at the Door

SPEAKER_00 8:36

somebody handed Anthropic $65 billion. At the end of May, Anthropic closed a $65 billion raise at a $965 billion valuation. That number puts them past OpenAI, the same company that spent this spring knife fight with the Pentagon. And BMO Capital Markets put out a note this week calling Anthropic a leading pure play AI lab. If you want to own a piece of artificial intelligence itself with nothing else attached to it, this is one of the only tickets on the board. Now I owe you the other side of this because there is a serious skeptic case here. Zero Hedge itself ran a piece last week titled Lanthropic's Marketing Playbook Returns. And the argument goes like this: every scary system card, every refusal, every muzzle, all of it is just theater. Fear is the product. You don't reach a near trillion dollar valuation by being the safest little lab in the room. The cage isn't protection at all. The cage is advertising. The muzzle is just how you signal to the market, which is precisely why it's worth the most. Here's the honest knot in that skeptic case. A gun shop profits from danger. The more dangerous the world feels, the more it sells. But that doesn't make the gun on the wall props. They're still real guns. So yes, anthropic profits enormously from that fear. And the thing that they're afraid of might still be completely real. Those two facts don't cancel out each other. They're both true, which is the place that this story takes us. The same week

Amodei and the Adult in the Room

SPEAKER_00 10:00

Fable launched, Dario Amadi, Anthropic CEO, published an essay. He called it Policy on the AI Exponential. 200 comments on hacker news within hours, and it's Amadi doing the thing he's done every single public appearance this year, including the Oprah Winfrey interview, where he openly admitted that he can't legitimately say he sleeps well at night. He argues the technology is compounding faster than any institution can possibly adapt to. That's the curve itself, the sheer speed of it, and it is the central danger, and that somebody has to act like the adult in the room before the law manages to catch up. He isn't wrong that the law is nowhere close. The question is who appointed the adult? There are two ways to hear that essay, and your read on this whole company depends on which one you pick. Version one, this is the only executive in the entire industry telling you the truth about his own product. Because to him the restraints matter more than the next quarter's revenue. Version two, a man whose company just passed OpenAI's valuation is publishing the intellectual justification for holding keys that absolutely nobody elected him to hold. Under that reading, the essay isn't a warning at all. It's a prospectus. Amadi told Oprah that the company tries to hold light and shade at the same time, that the benefits and the dangers are both real, and you have to carry both. It's fine, but holding light and shade gets a whole lot easier when you're also the one holding both the doors. Now the thing I promised you at the very top

The Sealed Box on Your Desktop

SPEAKER_00 11:28

the cage inside your own machine. While Fable was launching, the number one story on all of Hacker News was an AI agent running amok inside the Fedora Linux project. A few slots down, a different group of researchers showed that a one cent bank transfer, a single penny, can hijack a banking AI agent and bend it to its attacker's will. That's the actual world these models are walking into right now. Agents with real access doing real damage, getting manipulated in ways that nobody fully predicted, which finally explains the thing that Anthropic did to your desktop computer. Remember the virtual machine that the app builds the second that you launch it? Here's the report that exposed it. It blew up on Anthropic's own GitHub this week. 385 points. The complaint is that Claw Desktop on Windows fires up a 1.8 gigabyte Hyper-V virtual machine on every single launch. Even if all you ever do is open it and type one word into it, a sealed, walled-off computer built inside of yours every single time. The users filed it as a complaint about wasted memory. Look at it from the opposite direction, and it stops being a bug and starts being a confession. This generation of Claude is an agent. It writes files, it executes code, it's built to actually do things on your machine, not just chat. And Anthropic looked at that and decided their own creation doesn't get to touch your real computer. It gets a padded replica instead. So there's the vault in their own data center. There's the muzzle bolted onto the public model. There's 30 days of tape running on every conversation, and there's a containment cell that rebuilds itself on your own desktop every single time you open the app. When the one company on earth that knows this creature better than anyone alive keeps stacking up walls around it, you can call that paranoia if you want, or you can call it the most informed opinion in the building. If you use Claude and you're talking to Fable, the bedtime story, the muzzled one, your conversations are kept for 30 days, and you will never, ever touch the version that actually scared Microsoft. We got handed the children's edition and we were told that it was the whole library. Somebody else in a room that you will never see got handed the myth, mythos. That isn't just a side detail, that is the entire architecture, and we are standing on the public side of it. Every monster movie that you've ever watched trained you to fear one specific moment, the moment the creature finally gets loose. That isn't the moment that we're living in. The creature is contained. It is spectacularly contained, so well contained that the cage itself became a near trillion dollar business. The part that nobody actually voted on comes after the containment. Who decides which door you get to stand behind? Right now, the entire answer to that question is one company. Its founder writes the policy essays that justify the whole arrangement. Its servers keep the tape on every word you say. And in its naming department, they looked at the version that they sell you and they chose to call it a fable, which is the word for a story that you tell a child so they'll stop being afraid and go to sleep. So ask yourself why. The fable you talk to every day isn't just a product sitting on a shelf. This generation of model is also a teacher. It's being used right now to help train the next generation that comes after it. And separate research from the same field just proved that an AI's true nature gets passed down to the models that it raises through training data that no filter on earth can clean. The cage is one problem. What the creature is teaching its own children is another one entirely.

Classified as a Munition

SPEAKER_00 14:51

Right after I made this video, the United States government stepped in and they locked both doors. All access to Fable V and Mythos V suspended. Export control, the exact legal mechanism for missiles and weapons of mass destruction. They did not regulate this AI, they classified it as a munition. Anthropic calls it a misunderstanding. The cage wasn't enough. The containment failed, and the state took the keys. This was not a glitch or a corporate pivot. It's a containment breach on a geopolitical scale.