Two weeks ago, Washington reached into the market and switched off the two best AI models on earth. Claude Fable 5 and Mythos 5 went dark on an export directive — not throttled, gone. This week it declined to blacklist the third.
On Wednesday Reuters reported that the U.S. held off adding DeepSeek to its export blacklist even as it flagged more than 100 other firms as security risks. Put the two events side by side and the export regime shows its real shape: it disciplines American labs more reliably than the foreign competitor it is aimed at.
Look at the asymmetry in tempo. The Fable order was instant and total, executed against a hosted U.S. lab with a single chokepoint — one API to close, one company to call. DeepSeek got deliberation. More than a hundred Chinese firms made the risk list; the one model everyone actually worries about did not. The fastest, hardest action the regime took this month landed at home.
The reason isn't timidity. It's physics. DeepSeek ships open weights; the model is already downloaded, already mirrored across every hub that matters, already sitting on a hundred thousand laptops. An entity listing can't un-ship it. The control that worked on Anthropic — gate the API, and the capability stops — has nothing to grab onto when the thing was given away. Anthropic could be switched off because Anthropic held the switch. DeepSeek handed the switch to everyone.
Export controls discipline the firms that can be switched off. They route around the ones that can't.
The honest objection: these aren't the same instrument. Suspending Fable was an export control — stopping a U.S. firm from sending capability abroad. The DeepSeek question is an entity listing — cutting a foreign firm off from American inputs. Different statutes, different aims; one is not the mirror image of the other. Fair. But nobody on the receiving end of policy experiences statutes — they experience outcomes. And the outcome of a single fortnight is that the regime's sharpest move hit a domestic lab while its marquee foreign target got a pass. When the lever you pull fastest is the one pointed inward, stated intent stops mattering. The gradient is the policy.
The lesson for every lab watching is not subtle. A hosted frontier model is a leash; open weights are the way off it. The surest defense against a government kill switch is to never hold the switch yourself — give the model away before anyone can take it. Two weeks ago Washington proved it owns the off button. This week it showed how easy it is to build something without one.