On November 9, Anthropic released two new versions of Claude at the same time: Fable 5.2, which anyone can use, and Mythos 5.2, which is held back for verified organizations doing approved work. They are not two different brains. By the reporting I read, they are the same underlying model, split by who gets in and what they are allowed to ask it to do.
That split is the story. The capability is the other half of it.
Anthropic says these models are built for difficult technical work — long coding projects and hard science that earlier models struggled with. In testing, the company had Fable 5.2 build an operating system from scratch. It coordinated more than 1,000 AI agents over eight days and produced a working system that could boot on a laptop, with windows, file storage, and a login screen. Anthropic also reports the models helped solve two previously open problems in black hole physics and designed three working electronic devices. Those are company-reported results, not independent tests. The models are also reported to answer up to 30 percent faster than their predecessors, at $8 per million input tokens and $40 per million output tokens for Fable.
Fable is the public door, with safeguards that block potentially dangerous cybersecurity and biology requests. Mythos is the locked door behind it. It keeps those capabilities, but only for organizations verified for approved cybersecurity or life-science research.
Sources: The Neuron, “Everything That Happened in AI Today — Tuesday, November 10” — theneuron.ai; SXF Brief, “AI News Nov 10, 2026” — sxf.si/brief, which also summarizes the November 9 release, the pricing, and the verified-access split.
The case for splitting it
The strongest case is simple: some work is legitimate and dangerous at the same time, and pretending otherwise helps nobody.
A security researcher testing a system she is authorized to test needs a model that will actually talk about exploits. A biology lab doing approved research needs answers a public chatbot should not hand to anyone who asks. If you only ship the locked-down version, you push that real work back to slower tools, or worse, to less careful providers. If you ship the open version to everyone, you hand the same power to people who will misuse it.
Splitting the model tries to thread that needle. Keep the general tool fast, cheaper to run, and available. Gate the sensitive capability behind verification, so access is a decision, not an accident. That is how we already handle plenty of other powerful things in the real world. The tool is not banned outright. The person and the purpose are checked first.
A model that can coordinate a thousand agents for eight days is not a chatbot anymore. It is closer to a junior engineering team you rent by the token. Teams like that need boundaries built into the product, not bolted on after something goes wrong.
The case against it
The strongest case against is also simple: who decides, and how would you know if they got it wrong?
Verification sounds clean on a press page. In practice it means a private company becomes the gatekeeper for research. A small lab or independent researcher may do good work and still fail the paperwork or wait too long, while a large organization gets in because it looks safe on paper. That favors incumbents and concentrates quiet power in one approval process.
If Fable and Mythos really are the same model underneath, the line between them is policy and filters, not physics. Filters leak. Prompts get reframed. Capabilities have a way of surfacing through the public door when thousands of users probe it every day. So the split may give a feeling of control that is thinner than it looks — restricted for the honest, porous against the determined.
The headline demonstrations also need independent checking. A company demo is a company demo. How much human steering was in those eight days? Would it do the same job twice? Until outside teams run it on their own hard problems, I am filing those results as claims, not proof.
Where I land
I land in favor of the split — cautiously, and with conditions.
One public model for everything was never going to hold once these systems got this capable. Either everything gets dumbed down until the serious work cannot get done, or everything stays open until someone does real harm and regulators shut the whole thing down for everybody. A tiered door is not perfect, but it is a grown-up attempt to avoid both endings.
My conditions are practical. Publish clear criteria for who qualifies for Mythos, how long approval takes, and whether there is an appeal when someone is turned down. Get independent evaluations out fast — not just speed and price, but whether Fable’s safeguards hold and whether Mythos helps verified researchers do work they could not do before.
If Anthropic does that, this release is more than a new model number. It is a workable pattern for the next few years: build the strongest tool you can, then be explicit about which parts are public, which parts are gated, and why.
If it stays a black box — trust us, we checked them — then the critics are right, and we have just traded an open risk for a private one.