Maathangi Mohan
Jun 16

When the Plug Is in Someone Else's Hand

In June 2026, Anthropic released its most capable public AI model, Fable 5, and within three days took it away. Fable had launched on the 9th, and on June 12th, the US Commerce Department sent Anthropic a letter barring the model, and its restricted-access sibling Mythos 5, from use by any foreign national, anywhere. The access to both models was suspended for all users worldwide while Anthropic worked through the implications of the directive. Enterprise customers, hospitals, startups, and even Anthropic's own overseas employees lost access overnight for reasons unrelated to anything they had done.

Anyone in a low- or middle-income country building public services on a model like this has good reason to read that closely. The most advanced AI on the market was disabled by a letter from one commerce secretary in one farflung capital. If your national health-screening tool, your agricultural advisory service, or your local-language administrative system had been wired through that model, your "AI strategy" would have gone dark on a Friday night, and not because it failed, not because you ran out of money, but because a government you don't vote for made a decision you were not consulted on.

And here is the part that should unsettle a planning ministry most: the model was not pulled over a danger anyone has specified. By Anthropic's own account, the trigger was a contested "jailbreak" claim, filed by a rival company, that amounted to little more than asking the model to read a codebase and patch its flaws, something other public models do with no bypass at all. The letter did not even spell out the national security concern. The administration had tried to delay the launch; Anthropic refused; the directive came three days after launch. Anthropic is complying while openly calling the whole thing a likely misunderstanding. So Anthropic's most capable public model was switched off worldwide, by one letter, over a disputed rationale the company itself rejects. If that is enough, the bar for revocation is not high. It is barely a bar at all.

This is the part of the sovereign-AI debate that the cost arguments keep skating past; and the kind of question we keep coming back to at datocracy.

Wayan Vota's recent ICTworks series makes the economic case crisply: for most countries, the dream of a national GPU supercluster is a trap — and, in his framing, largely a way to sell more Nvidia chips. The escape, he argues, is to stop chasing 500-billion-parameter foundation models and instead fine-tune small, task-specific ones on a single university cluster, then run them on the Android phones people already carry. The cost gap, by his reckoning, runs to roughly a thousandfold. Masakhane, a grassroots pan-African collective, has already built natural-language tools for 52 African languages with no sovereign budget at all.

The Fable shutdown supplies the argument those economics imply but don't have to spell out: small, open, on-device AI is not just cheaper, but also un-revocable. A model whose weights you have downloaded, fine-tuned on your own data, and deployed on a community health worker's handset cannot be turned off by an export-control directive in Washington. There is no kill switch, because there is no switch. No API in Virginia, no licence server, no foreign cloud account that can be suspended. The compute sits where the user already is, and so does the control.

When capability lives in someone else's data centre, it can be withdrawn for someone else's reasons, be it national security, trade leverage, a jailbreak report filed by a rival, or a change of administration. The people cut off are rarely the intended target; LMIC health workers and farmers are simply collateral in a contest between great powers and frontier labs. Dependence on a revocable service is a borrowed capability, and the lender can call the loan at any time, without notice, and without recourse.

But "on-device" is shorthand for something more general, and a second front is already opening. What makes a model un-revocable is possessing the weights and controlling the compute they run on. Across the Global Majority, a regional layer is filling in between the foreign cloud and the edge device. India's Bhashini, which runs real-time translation across eleven languages, moved its workloads off foreign hyperscalers and onto domestic infrastructure on the grounds that compute it could not govern was unacceptable. Cassava Technologies is stitching together a pan-African network on its own fiber backbone, so that African researchers and governments can train and deploy on infrastructure that stays on the continent. The economics point the same way: McKinsey expects inference, and not training, to become the dominant use of AI compute by 2030, and inference is exactly the layer that can sit close to home. 

Two honest caveats keep this short of a fantasy of self-sufficiency, and the regional build-outs sharpen both.

First, the dependence doesn't vanish; it moves, and sometimes only a short distance. Cassava's pan-African cloud runs on twelve thousand Nvidia GPUs and it is, in fact, Nvidia's first cloud partner on the continent. The base models are still trained by a handful of foreign labs, the advanced silicon is still designed and rationed abroad, and the next update and the next security patch still arrive from elsewhere. The risk shifts from losing what you have tomorrow to missing out on what comes next. This is a slower problem, and a far more survivable one.

Second, open-weight licences can change, and not in your favour. But a model already downloaded and running is yours to keep in a way a cloud subscription never is.

Which leaves us with the question: who sets the terms? A single country has little leverage against Nvidia or U.S. export policy. A bloc of twenty, pooling demand for cheap devices, funding a shared commons of open models and local-language data, building regional governance with teeth, is a different conversation. And almost nobody is paying for it yet.

The lesson of Fable 5 is not that frontier AI is too dangerous to touch, or that LMICs should refuse it. It is that no country should lay the floor of its public services on something a foreign government can pull out from under it overnight — least of all when "overnight" can mean three days after launch, over a pretext the vendor itself disputes. Borrow the frontier for the ceiling if you must. But build the floor on what cannot be switched off from abroad: the regional compute you can actually govern, the languages people actually use, and the models you can hold and run yourself.

French English