White House export order on Mythos repeats 1990s PGP and 2013 Wassenaar failures

The order required Anthropic to block all non-US access to Mythos and Fable within 90 minutes after SK Telecom access and an Amazon-reported jailbreak. Mythos had been limited to 150 vetted entities since its April launch. Prior controls produced identical compliance theater: PGP source code was printed as a book to evade munitions listing, while Wassenaar signatories issued licenses for NSO Group tools despite documented use against dissidents. Both regimes left the underlying technology available through publication, forks, and third-country development.

Data from the Crypto Wars shows the 1993-1996 investigation against Zimmermann ended without conviction once source code circulated internationally. Wassenaar's 2013 intrusion software category triggered license requirements yet failed to halt commercial spyware exports, as confirmed by subsequent Citizen Lab reports documenting Pegasus deployments. Mythos restrictions now face the same diffusion vector: model weights can be reconstructed from partial releases or replicated via open research once safety techniques leak.

Operationally the policy creates a 90-day compliance window that forces labs to segment infrastructure by nationality rather than capability. Historical precedent indicates enforcement collapses once equivalent models emerge from non-signatory jurisdictions, as occurred with strong encryption after 1996. The blind spot remains unchanged: export controls target distribution chokepoints that no longer exist for software or weights.

Next phase requires either multilateral weight-classification treaties or domestic compute-access licensing; unilateral US action alone has produced zero durable containment in prior cycles.