THE LAB

The Government Pulled the Plug on Fable 5: What Just Happened and Why It Matters

At 5:21 pm Eastern on Friday, Anthropic received a letter from the US government. By 9:59 pm Eastern, claude-fable-5 was returning 404s. The government invoked national security export control authorities to order Anthropic to suspend access to Fable 5 and Mythos 5 for any foreign national — anywhere in the world, including foreign nationals employed by Anthropic itself. The order was unworkable as written, so Anthropic did the only thing it could: it pulled both models for everyone.¹

The stated justification is a jailbreak. Specifically, Anthropic says the government presented what amounts to a non-universal, narrow jailbreak — one that "essentially consists of asking the model to read a specific codebase and fix any software flaws." Anthropic reviewed it, found the capability it demonstrated is "widely available from other models (including OpenAI's GPT-5.5)," and pushed back hard in the same statement that announced compliance. The company's position: the jailbreak does not meet any reasonable threshold for recalling a model deployed to hundreds of millions of users, and if this standard were applied industry-wide, no frontier model could ever ship. Wired reported the government gave Anthropic only verbal evidence of the finding before the directive arrived.²

The backdrop matters. Earlier this year the Trump administration's Department of Defense designated Anthropic a "supply chain risk," effectively freezing the company out of government and contractor work. Anthropic sued. The two parties have been in open conflict since. Simon Willison, noting the sequence of events as they unfolded Friday night, called the situation "nuts" and tracked the exact API cutoff using a polling script — his access dropped at 6:59 pm Pacific, roughly four and a half hours after the directive was received.³

The 12 Grams of Carbon analysis makes the most pointed observation: the announcement landed at 5:21 pm on a Friday. That is not an accident. Governments use Friday-evening timing to let markets absorb shocks over the weekend. The writeup catalogs a pattern of the current administration doing exactly this — market-sensitive announcements staged after futures close. The author also flags the competitive angle directly: Anthropic is heading toward an IPO, Fable was by all accounts its strongest model, and OpenAI's investors include figures with close ties to the administration. Whether the motive is genuine security concern, settling scores, or something more cynical about picking commercial winners, the result is the same: the strongest publicly available model is gone, and the precedent is set that the government can pull a commercial model unilaterally, on short notice, based on evidence it does not have to disclose.⁴

The chilling effect on the industry is real regardless of how this specific dispute resolves. No AI CEO will publicly argue their own model is dangerous again if they know the consequence is a regulatory shutdown. The market for frontier AI now has a new risk category — not a safety incident, not a data breach, but sovereign revocation.

As this paper reported Friday, the Atomic Arch supply chain attack against Arch Linux's AUR was initially counted at 400+ compromised packages. The scope is larger. Sonatype's ongoing analysis and community tracking now puts the number at approximately 1,500 packages, with a second wave using a separate payload (bun install js-digest) attributed to the same npm publisher.⁵

The Hacker News technical breakdown adds detail the initial reports missed: the malware — a Rust binary — does not require root to run, but when it has it, it loads an eBPF rootkit that hides the process from standard tools using pinned BPF maps named hidden_pids, hidden_names, and hidden_inodes. It also kills debugger attachment attempts. A second staged file tied to monero-wallet-gui is flagged in independent reverse-engineering as a possible cryptominer.⁶

The practical consequence: if you installed or updated any AUR package on or after June 11, removing the package is not sufficient cleanup. A package manager can only remove what it knows about. Grep recent build history and caches for npm install atomic-lockfile and bun install js-digest. If either ran, treat the host as fully compromised — rotate every credential the stealer targets (browser sessions, SSH keys, GitHub and npm tokens, Slack, Teams, Discord, Vault, Docker/Podman, cloud keys) and, if the payload ran as root, reinstall from trusted media. The eBPF rootkit means you cannot trust the kernel's own reporting on a potentially infected host. The full indicator set including the Tor C2 address is in the independent reverse-engineering analysis at ioctl.fail; SHA-256 for the main payload is 6144d433f8a0316869877b5f834c801251bbb936e5f1577c5680878c7443c98b.

A Munich regional court has issued a preliminary ruling that Google is liable for false statements generated by its AI Overviews feature — and the reasoning is more consequential than the specific case. Two publishers sued after AI Overviews associated their names with scam practices. Google's defense was the standard one: the feature displays a disclaimer that AI can make errors, and it merely aggregates third-party content. The court rejected both arguments. It found that AI Overviews produces "independent, new, and substantial statements" that did not appear in any of the underlying sources, making Google the author of the false claims, not a neutral pipe for third-party content. The disclaimer, the court held, does not transfer liability to users — if it did, no victim of an AI hallucination would ever have legal recourse, because the original sources never said the thing the AI invented. A company spokesperson said Google is carefully reviewing the decision, which is not yet final.⁷

The ruling applies German law and is not yet final, but its core logic — that an AI system generating novel false claims cannot hide behind the intermediary-platform shield — is the argument that plaintiff attorneys in every jurisdiction have been assembling. If it survives appeal, it makes AI-generated summaries in search engines a substantive liability surface, not a feature covered by boilerplate disclaimers.

Trending today: GitHub is dominated by Claude Code and AI agent skills collections (CL4R1T4S, addyosmani/agent-skills, obra/superpowers, phuryn/pm-skills), Claude Code switcher wrappers, and Fable 5 experimentation repos — no repository cleared the technical novelty bar.

↑ Back to top

THE PELOTON

TARA Implodes: Seixas Down, Jorgenson Stripped to Four

↩ Developing story — first reported Jun 12

GRAND COLOMBIER, France — The 2026 Tour Auvergne-Rhône-Alpes has been eating riders for a week and it accelerated the process on Saturday. Paul Seixas, the pre-race GC favourite, went down inside the first 100km of Stage 7 and found himself more than four minutes adrift of a peloton he had hoped to shatter on the Grand Colombier's slopes. The crash came on the descent off the Côte de Saint-Maurice-de-Rotherens, where gravel on the road had already forced a race neutralisation. When racing resumed, Seixas fell. He got back on his bike, but the peloton was gone — and, with it, most of his GC ambitions.

His rivals had their own problems. Matteo Jorgenson (Visma-Lease a Bike) came to the line for Stage 7 with three teammates instead of seven.¹ Jørgen Nordhagen — a climber who had done much of Friday's final ascent alongside Jorgenson — and Classics specialist Per Strand Hagenes did not start after developing illness symptoms overnight. Combined with Wout van Aert's withdrawal before Stage 6, Visma are down three riders in five days. Nordhagen, who had finished 13 seconds behind Jorgenson on Stage 6, was the most significant loss.¹ Jorgenson still holds time over most GC rivals, but the mountains offer no mercy for an undermanned team. "Matteo is the priority," said Bruno Armirail, who rose to second overall on Stage 6 and finds himself with his own slim theoretical GC window — though he was candid about his chances: "Even if I get over climbs well, I'm not a pure climber."¹

The broader chaos in the race reflects a flu outbreak that Movistar boss Eusebio Unzué also flagged after losing several of his own riders. The race formerly known as the Critérium du Dauphiné has served, this year, as more of a medical attrition event than a dry run for the Tour.

The injury toll from Stage 6 looks worse in the morning light. Netcompany-INEOS Director of Racing Geraint Thomas confirmed on Saturday that Oscar Onley — who had been third overall before the stage — clambered out of a roadside ravine with a dislocated shoulder and a chunk taken out of his knee.² Onley finished the stage nearly thirty minutes down, then chose not to start Stage 7 while awaiting scans. "It could have been a lot worse," Thomas said. "He went down a bit of a drop into a ravine."² Thomas expressed cautious hope Onley could still make the Tour de France, though the dislocated shoulder carries an unknown tail risk depending on what the scans reveal.

More certain is the damage to Josh Tarling. The Netcompany-INEOS time trial specialist broke his collarbone on Stage 6, underwent surgery Saturday morning, and now faces a three-week window to recover before the Tour starts in Barcelona on July 4. The typical recovery timeline for a broken collarbone runs six to twelve weeks.³ Thomas cited Jonas Abrahamsen's two-and-a-half-week return last year as a precedent,³ while noting it was described as "against all odds" by medical staff. Tarling was set to be the centrepiece of INEOS's team time trial strategy on Stage 1, the opening day in Barcelona — a role that will now need to be filled by someone else, or dropped. Thomas did not rule him out: "We're staying positive, and hopefully they'll be good for the Tour."³

As this paper reported Thursday, van Aert withdrew from TARA before Stage 6 with elbow discomfort after winning Stage 5. The update today is not encouraging. Visma sports director Maarten Wynants told Domestique that the wound is still not healing, and the team will not project forward until the elbow situation resolves. "First we have to make sure the elbow recovers," Wynants said. "After that, we will take it step by step and look again at the schedule."⁴ Van Aert had been explicit about targeting the Tour's opening weekend in Barcelona — the team time trial on Stage 1 and whatever sprint chances the first few days offered. That target is now suspended.

Away from the race, Bloomberg reported Saturday that Telefónica — Movistar Team's title sponsor since 2011 — wants out. According to multiple anonymous sources cited by Bloomberg and corroborated in the Spanish press, the telecoms giant is seeking either to sell its sponsorship contract or to bring in co-sponsors to share the costs. Sports consultancy YouFirst has reportedly been engaged to run the search. Telefónica's contract with team owner Abarca Sports is worth €25 million annually and runs through 2029, so the teams are financially stable in the near term.⁵ The longer-term question is what a diluted or rebranded identity means for a squad that has carried the Movistar name since 2011 and traces its origins to 1980. The Bloomberg report links the decision to Telefónica's divestiture of most of its South American operations — a market where the Movistar sponsorship had peak value during Nairo Quintana's glory years in the mid-2010s. With Quintana gone and Alejandro Valverde retired, the men's team's profile in that region has faded. The women's team's trajectory is the opposite — they have been one of the sport's leading forces — but the sponsorship rationale apparently follows the men's commercial map.

Chloé Dygert's 2026 season is over. As this paper covered when she posted to Instagram on Friday, the Canyon-SRAM rider's comeback attempt collapsed after a RED-S diagnosis, a virus, adverse blood markers, and confirmation that shoulder damage from her Paris-Roubaix crash will require surgery. A collapsed nasal valve discovered in further imaging adds a second surgical procedure. The timing is particularly sharp because Dygert is widely expected to leave Canyon-SRAM at the end of this season after six years. Her message carried defiance — "goals haven't changed, just the path getting there has"⁶ — but there is no racing timeline to offer. The season now ends without the race block she would have needed to show where she stands heading into 2027.

↑ Back to top

THE WORLD

Iran MOU Said to Be Days Away; Musk Becomes First Trillionaire

↩ Developing story — first reported Jun 12

• Iran MOU within days — NBC and ABC report both sides expect a memorandum of understanding to reopen the Strait of Hormuz signed imminently; Pakistan's prime minister says a deal is expected within 24 hours. Trump disputes Iran's account of the terms, and Iran launched drones at commercial ships in the strait Friday even as diplomacy advanced. NBC News
• Musk first trillionaire — SpaceX shares began trading Friday; the IPO pushed Elon Musk past the trillion-dollar threshold, the first individual in history to reach it. KIRO 7
• Election meddling firm — Israeli firm BlackCore is suspected of interfering in elections in New York, Scotland, and France, per Reuters, adding to earlier reports of its activity. Reuters

LOCAL

The Seahawks received their Super Bowl LX championship rings in a private ceremony Thursday night.⁴ The rings are reportedly filled with hidden details; no public event was held.

The Puyallup Tribe of Indians became the first Indigenous North American tribe recognized by FIFA, marked with a parade and fireworks in the South Sound on Friday night as World Cup games get underway at Lumen Field.⁵

King County's council passed a 0.1% sales tax increase on a 5-4 vote, generating roughly $90 million per year to fund road maintenance.⁶ Most of the money goes to unincorporated county roads; a pass-through program sends a slice to cities and towns.

Amtrak Cascades cut at least 10 minutes off Vancouver–Seattle travel this week: U.S. customs prescreening now happens at Pacific Central Station before departure, eliminating the stop at the Blaine border crossing. Scheduled southbound time drops to four hours and fifteen minutes. The Urbanist

Sound Transit CEO Dow Constantine told reporters there is a "six or seven year runway" to close the $9–11 billion Ballard Link funding gap, pushing back on reports that the extension is functionally dead. The Urbanist

Heat advisory territory this weekend: 82°F Saturday, 86°F Sunday in Issaquah, with record highs possible in Seattle Sunday and Monday.

ON THE TRAIL

Weekend window: Sat Jun 14 – Sun Jun 15. Planning note: Juneteenth falls on Friday Jun 19, giving you a three-day weekend the following week (Fri–Sun Jun 19–21). With Thursday Jun 18 as an opportunistic PTO day, conditions and forecasts look excellent through that entire stretch — worth eyeing now.

This weekend's forecast is unusually clean across all Cascade regions: sunny and 0–1% precip from I-90 through the Mountain Loop and into Stevens Pass. Go.

---

PICK 1 — 1-night: Tahoma Creek Trail → Emerald Ridge → South Puyallup Camp Region: Mt Rainier SW (Longmire/Paradise) — ≈110–140 min from Issaquah Trip length: 1-night Mileage/gain: ~14–16 miles round trip, ~3,000 ft gain via Tahoma Creek Trail and Emerald Ridge to South Puyallup Camp

A Jun 12 trip report nailed every criterion: zero snow on route, water sources throughout, no bugs, and a handful of people total on a trail that most hikers overlook because of its "unmaintained" label. The Tahoma Creek Trail itself requires navigation (public Gaia tracks help) and has some blowdowns and washouts, but the reporter and a friend ran it without incident, reached Emerald Ridge, and descended via South Puyallup Camp and West Side Road. No wading fords. The trail is flagged unmaintained — bring that Gaia track.

Weather (Mt Rainier area): "Sunny, high near 68°F Saturday; sunny, high near 73°F Sunday. Precip 0% both days."

Clears all six criteria: snow-free confirmed, abundant water, no bugs reported, very low crowds, no fords required, excellent weather both days.

→ WTA trip report, Jun 12

---

PICK 2 — 1-night: Mason Lake via Ira Spring TH (Putrid Pete's Peak traverse optional) Region: I-90 / Snoqualmie Pass — ≈35–55 min from Issaquah Trip length: 1-night Mileage/gain: ~5 miles / ~2,000 ft to Mason Lake camp; add Mount Defiance (~2 more miles, ~800 more ft) for day-two extension

Multiple Jun 12 reports confirm excellent conditions: no biting bugs, mostly dry trail (minor mud patches), beargrass and paintbrush blooming, water at Mason Lake, no snow, no fords. The main Mason Lake trail pulls weekend crowds, but once past the junction most parties continue on the standard route — the Putrid Pete's Peak traverse to Defiance sees dramatically fewer people.

Weather (I-90/Snoqualmie): "Sunny, high near 79°F Saturday; sunny, high near 84°F Sunday. Precip 1%/0%."

Clears all six criteria: snow-free, water at lake, no biting bugs confirmed, crowds thin past Mason Lake junction, no fords, good weather.

→ WTA trip report — Putrid Pete's/Defiance traverse, Jun 12 → WTA trip report — Mason Lake/Mount Defiance, Jun 12

---

PART 2 — REGIONAL SNAPSHOT

• I-90 / Snoqualmie Pass — Annette Lake and Mason Lake trails in great shape, minor mud, no biting bugs. Snow Lake still has a small snowfield near the lake but walkable. Ira Spring TH road good for all vehicles. - Mt Rainier SW (Longmire/Paradise) — Tahoma Creek–Emerald Ridge: zero snow, no bugs, multiple water sources. Highly recommended this weekend. - Mt Rainier SE (Cayuse/Stevens Canyon) — Shriner Peak: six hikers all day on Jun 12, nearly all snow melted, great Rainier views. Solid day-hike option. - Mountain Loop Highway — Blowdowns at Big Four cleared; Boulder Lake overnight possible but bugs present in large numbers (permethrin recommended). Lake 22 crowds typical for a Friday — likely busy Saturday. - Stevens Pass East (Nason Ridge) — Alpine Lookout via Round Mountain TH: 10 mi RT, 2,500 ft, trail in great shape, quiet (two backpackers and a day hiker Jun 12). Avoid Merritt Lake camp: extremely buggy. Trail from Merritt toward Rock Mountain has near-impassable blowdowns — don't attempt that section. - South Cascades / White Pass — High Rock Lookout was vandalized this week: windows smashed, door destroyed, restoration materials scattered. USFS law enforcement investigating. Contact Cowlitz Valley Ranger Station at 360-497-1100 with information. The hike itself is still accessible but the lookout is damaged.

↑ Back to top

FROM THE ARCHIVE

The Presses Run: June 13, 1971

A night pressroom, 1971. Massive flatbed letterpress machines loom in deep shadow, inked rollers caught mid-rotation. A compositor in rolled shirtsleeves feeds broadsheet pages into the press, his back turned to the viewer, silhouetted against the mechanical glare. Stacked galley trays crowd the foreground. Through a narrow window in the background, predawn darkness. Bold pen-and-ink linework, dense cross-hatching on the machinery and walls, white space reserved for the paper feeding through the press. The moment before a secret becomes public.

The Sunday New York Times landed on doorsteps on June 13, 1971, with a story that the Nixon administration had not seen coming — and immediately moved to stop. Daniel Ellsberg, a former Defense Department analyst, had spent months photocopying a 47-volume classified study commissioned by the Defense Department: the full internal history of how the United States had walked into Vietnam. He had tried the Senate first. Senator after senator declined. So he gave it to the Times.

The paper called it the Pentagon Papers. What it contained was damaging not to Nixon — the study ended before he took office — but to four consecutive administrations: Truman, Eisenhower, Kennedy, and Johnson. Each had told the public one thing about the war and known another. The 47 volumes documented the gap in meticulous detail. The report had been completed in 1969 and never declassified; 36 analysts had spent 18 months writing it.¹¹

The Nixon administration went to court within days. A judge halted publication. The Washington Post had begun running its own excerpts by then, and it too was enjoined. Both papers fought back, and on June 30, 1971 — seventeen days after the first story ran — the Supreme Court ruled for the press, 6–3. Publication resumed.

Nixon's fury over the leak produced the proximate cause of his eventual undoing. His White House created a Special Investigations Unit to stop future disclosures. They became known as the Plumbers.¹ The following year, those same operatives broke into the Democratic National Committee headquarters at the Watergate Complex. The espionage charges against Ellsberg and his co-defendant were dismissed in 1973 after government misconduct surfaced at trial. Nixon resigned in August 1974.

The full text of the Pentagon Papers ran to roughly 7,000 pages.¹ Eleven words remained redacted until 2011.¹

↑ Back to top

THE FUNNIES

The Domestique Count Hits Zero / The Government Took a Long Weekend

*After Pearls Before Swine — on the Tour Auvergne-Rhone-Alpes eating its own start list, leaving one directeur sportif with three teammates and a shrinking whiteboard. After Bloom County — on what it looks like from the newsroom when a government bureaucrat pulls a frontier AI model at 5:21 on a Friday, with no court order and a very nice manila envelope.*

↑ Back to top

ALSO NOTED

Also Noted

• WASI 0.3 ratified — async is now native to WebAssembly Components — The WASI Subgroup voted to ratify WASI 0.3.0, which moves async I/O out of the `wasi:io` compatibility layer and into the Component Model itself as first-class `stream`, `future`, and `async func` primitives, enabling components written in different languages to share a single host-managed event loop rather than each running their own. bytecodealliance.org Jun 11, 2026
• Active Club network coordinated the Belfast riots from the US — A Wired investigation documents how the white-supremacist Active Club movement — including US-based chapters — activated within hours of Monday's knife attack in Belfast, advising and coordinating the masked youths who spearheaded arson and anti-immigrant violence while mainstream attention focused on Tommy Robinson and Elon Musk. wired.com Jun 12, 2026
• All four original id Software founders reuniting at QuakeCon 2026 — John Carmack, John Romero, Adrian Carmack, and Tom Hall will appear together at QuakeCon 2026 (August 6–9, Grapevine, TX) as part of the convention's 30th-anniversary celebration of Quake, with speculation running high about a franchise announcement. plusforward.net May 16, 2026
• Sidi spotted testing a lace-up pro road shoe on del Toro — Cyclingnews documents at least three prototype iterations of an unreleased Sidi lace-up road shoe worn by Isaac del Toro in competition since late 2025, including one stage where he crossed the finish line in mismatched shoes (one Shot 3, one prototype), suggesting a Tour de France launch is likely. cyclingnews.com Jun 13, 2026
• Arm's Neural Dawn demo brings ray-traced shadows to mobile via neural super-sampling — Arm and Sumo Digital built a production-scale mobile game in Unreal Engine 5.6.1 using Arm Neural Technology — combining Neural Super Sampling and Denoising (NSSD) and Neural Frame Rate Upscaling (NFRU) — to achieve complex direct lighting and ray-traced shadows within a mobile power budget, set to be demoed at SIGGRAPH 2026's Arm Create Dev Day on July 20. _(Vendor source: sponsored content on the SIGGRAPH blog.)_ blog.siggraph.org Jun 2026
• Simon Willison adds document-paste context to his OpenAI WebRTC audio playground — Willison updated his browser-based realtime audio tool to support GPT-Realtime-2 (OpenAI's "GPT-5-class" voice model) and to accept pasted document context, enabling spoken Q&A about arbitrary text without waiting for the model to land in the iPhone ChatGPT app. simonwillison.net Jun 12, 2026
• Follow-up: Cannondale's Almelo closure — production moving to Dieren, Emstek, and Kėdainiai — Bicycle Retailer confirms Pon.Bike's previously announced closure of Cannondale's dedicated Almelo, Netherlands facility, adding that production will transfer to its Dieren (Netherlands), Emstek (Germany), and Kėdainiai (Lithuania) multi-brand factories with an 18-month transition for the roughly 120 affected employees. bicycleretailer.com Jun 12, 2026
• UK parliamentary committee urges government to ditch Palantir's NHS contract — The Science, Innovation and Technology Committee recommended exercising the 2027 break clause in the NHS Federated Data Platform contract, calling Palantir "the most concerning example" of dangerous dependency on a small number of US tech providers and flagging that Palantir also received a £240 million MoD contract without competitive tender. electronicsweekly.com Jun 3, 2026
• June 13, 1966: Miranda v. Arizona — The Supreme Court ruled 5–4 that suspects in police custody must be informed of their right to remain silent and to have an attorney present — the ruling the archive section's Pentagon Papers piece displaced today, though it is equally one of the date's defining moments. britannica.com Jun 13, 1966

↑ Back to top

THE QUESTION

What Institutional Check Exists When the Government Pulls Something Without Showing Its Work?

Fifty-five years apart, the same structural problem: a government decides something the public is reading — or using — poses a risk, and moves to stop it without showing its work.

The Archive piece today covers June 13, 1971: the Nixon administration went to court to halt publication of the Pentagon Papers within days of the first story running.¹ What happened next is the part worth dwelling on. The press fought back. Courts intervened. Seventeen days after the Times ran its first installment, the Supreme Court ruled 6–3 that the government had not met the heavy burden required to restrain publication.² The institutional check worked: prior restraint is presumptively unconstitutional, the justices said, and the government's national-security claim did not survive scrutiny.

Friday afternoon, Anthropic received a government directive invoking national security export control authorities and pulled Fable 5 and Mythos 5 offline within hours.³ THE LAB covers the mechanics. What the Pentagon Papers comparison surfaces is the structural gap: in 1971, the government had to go to court, where it had to articulate its justification, where the target had standing to contest it, and where an independent body could say no. None of that happened Friday afternoon. The directive arrived, the models went dark, and the evidentiary basis — a jailbreak that Anthropic publicly contests as both narrow and non-unique — has still not been independently reviewed by anyone outside the executive branch.³ Anthropic can sue, and may. But the product is already gone.

This is not a complaint about any particular outcome. The question isn't whether this specific model should or shouldn't have been pulled. It's whether the machinery for making that call has any external check at all. The 1971 framework — prior restraint requires a court — existed precisely because the Founders were skeptical of executive power to suppress information on its own assessment of risk. The analogous doctrine for commercial products is murkier. Export controls give the executive broad unilateral authority. There is no equivalent of the prior-restraint presumption that forces the government to defend its reasoning before the thing disappears.

The consequence, as THE LAB notes, is a new risk category for the entire industry: not a safety incident, not a breach, but sovereign revocation based on evidence that is never tested. No company will publicly argue its own model is dangerous if the penalty is a shutdown. And if the only institutional check is a lawsuit filed after the product is already offline — litigated over months or years while the competitive window has closed — it is not clear that check is doing the work the Pentagon Papers model was designed to do.

Carry that through the day: the 1971 case established that the government bears the burden of justifying suppression. Fifty-five years later, it's not obvious who bears it now — or where they have to carry it.

↑ Back to top