“We'll begin restoring access tomorrow, and will share an update soon.

“We’re grateful to our users for their patience, and to everyone who worked with us on redeploying the models.”

The original ruling restricting foreign nationals from accessing the models also included Anthropic employees. Given the ruling’s scope, Anthropic decided to restrict access to the models entirely at the time.

The government was also concerned regarding reports that the models were prone to jailbreaking under certain circumstances, claims that Anthropic strenuously denied.

“No testers have yet been able to find a universal jailbreak – a jailbreak method that can very broadly bypass the model’s safeguards, unblocking a wide range of cyber capabilities,” the company said in response to the original restrictions on June 12.

Anthropic said it understood that only one potential jailbreak had been shared with the government, although it has only been provided with “verbal evidence” that it occurred.

“As we have stated publicly, we believe the government should have the ability to block unsafe deployments, as part of a statutory process that is transparent, fair, clear, and grounded in technical facts. This action does not adhere to those principles,” Anthropic said.

The news comes at the same time Anthropic announced its Sonnet model, Claude Sonnet 5, which the company has called “the most agentic Sonnet model yet”.

“For many developers, the agentic AI era began with Sonnet-class models: Claude Sonnet 3.5, 3.6, and 3.7 were the first models that showed impressive skills in coding and tool use. More recently, though, the clearest gains in agentic capabilities have been in our Opus-class models,” Anthropic said in a June 30 statement.

“Sonnet 5 narrows the gap: its performance is close to that of Opus 4.8, but at lower prices. It’s a substantial improvement over its predecessor, Sonnet 4.6, on important aspects of agentic performance like reasoning, tool use, coding, and knowledge work.”