Update, 2026-06-13: After this article was published, Anthropic said a U.S. government export control directive required it to suspend Fable 5 and Mythos 5 access for all customers. Anthropic said the directive arrived on 2026-06-12 at 5:21pm ET, all other Anthropic models were unaffected, and the company was working to restore access. The access dates and pricing route below are now historical; the audit pattern still applies. A separate business-impact analysis is here: what the Fable 5 and Mythos 5 suspension means for AI workflows.
Use Claude Fable 5 first as a planning model for long codebase audits. Its value sits in repo comprehension, risk ranking, and cost-aware task plans before anyone changes source code.
The date matters because the billing route changes on June 23.
Until June 22, Fable 5 is included for eligible Claude plans. After that, teams can still use it through consumption and API pricing, which makes the right question more practical: which audit runs deserve Fable's budget?
- Plan access changes after June 22. Fable 5 remains available through usage-priced access, with Anthropic listing $10 per million input tokens and $50 per million output tokens.
- The first useful run is read-only. Ask for repo maps, risk order, missing proof, and task plans before you ask for code changes.
- webvise used the release to calibrate an audit process. The goal was to find where review time is worth spending, not to dramatize normal maintenance work.
- Privacy gates decide the prompt. Fable requires 30-day data retention for safety monitoring, so secrets and customer records stay outside the context.
- The expensive model belongs at the planning layer. Use Fable for comprehension and judgment, then hand bounded tasks to engineers or cheaper executors.
If your team wants the same shape before plan access changes, webvise's AI consulting service can turn one repo and one workflow into a reviewed remediation plan.
June 23 Changes the Billing Route
Anthropic's Fable page frames Claude Fable 5 around hard knowledge work, long coding tasks, and agent runs that last beyond a normal chat session. That makes it useful for audits where the output is a plan, not a quick patch.
The included-plan period is useful for one careful audit sprint. From June 23, the same harness should run with API budgets, logs, and a tighter definition of which questions need the most capable model.
| Fact | Detail | How to route it |
|---|---|---|
| Included Claude plan access | Runs through June 22 for eligible plans | Use it for one repo map, one risk pass, and one plan packet |
| After June 22 | Usage-priced access remains available | Reserve Fable for unclear, high-cost, or cross-system questions |
| API price | $10 input and $50 output per million tokens | Set budgets before long runs and store token logs |
| Context and output | 1M-token context and 128k max output | Combine repo maps, docs, and issues into one structured review |
| Data retention | 30 days for safety monitoring | Keep secrets, customer records, and production exports out |
A Good Audit Starts Read-Only
The first pass should produce decisions before diffs. A large model can read more context than a reviewer can hold in one sitting, but the useful artifact is still a short, reviewable list of claims.
My June 10 run used a fixed packet across selected active projects and internal workflows. The aim was calibration: which findings were useful enough for engineers to act on, which prompts produced noise, and which files should stay out of context.
- Repo map: apps, packages, route handlers, auth boundaries, data models, deployment scripts, and test commands.
- Risk pass: permission checks, environment handling, uploads, webhooks, rate limits, forms, and third-party API usage.
- Test pass: missing negative tests, weak integration coverage, slow scripts, localization gaps, and visual QA risks.
- Plan output: file path, current behavior, proposed change, validation command, owner, and stop condition.
- Human triage: accepted findings, rejected findings, parked questions, and the reason for each decision.
A maintained multilingual site might only need stronger route coverage around localized pages and sitemap generation. That is ordinary product hygiene, and Fable is useful because it can connect routing, content files, and search behavior in one review.
A workflow app might need idempotency tests before queue changes. That finding says the workflow has business value and deserves proof around failure modes before an agent edits the surrounding system.
Spend Fable on Planning, Then Execute Cheaper
A million-token context tempts teams to hand the whole repo to the model and ask for finished work. The better pattern is narrower: let Fable read, rank, and write tasks, then keep execution inside normal review.
| Model job | Use Fable for | Review gate |
|---|---|---|
| Repo comprehension | Map the system and rank the riskiest surfaces | Engineer checks cited files before accepting the plan |
| Security inventory | Find exposure patterns and missing tests | Human owner decides which findings become tasks |
| Architecture review | Explain coupling, duplication, and migration risk | Owner accepts the target shape before edits |
| Execution planning | Write small task packets with commands and expected output | Each task has a stop condition |
| Branch review | Audit the changed surface before merge | Reviewer compares findings against the diff |
This only works when repo instructions are clear. The production version is covered in the AGENTS.md template article, which shows what should live in the file before agents touch a serious codebase.
Privacy Rules Decide What Enters the Prompt
Fable's 30-day retention rule changes prompt construction for client work. The review packet should contain enough context to reason about the system without carrying secrets, production exports, or private customer records.
- Keep secrets out. Credentials, private customer records, production exports, and raw analytics stay outside model context.
- Use slices. Send repo maps, sanitized file groups, failing tests, and architecture notes instead of an indiscriminate dump.
- Log the run. Record model, date, token budget, files inspected, commands run, and accepted findings.
- Gate sensitive actions. Permission changes, billing actions, email sends, production writes, and data deletion stay human-approved.
- Keep rejected findings. False positives are useful when the reason is recorded and the next audit can skip them.
This is also where webvise's AI automation service connects. A finding that appears across multiple projects is often a workflow candidate: recurring report generation, repeated QA checks, stale handoff docs, or manual release review.
When Fable Earns the Price
After June 22, the decision becomes economic. Fable earns its price when the answer saves expert review time, prevents a costly wrong turn, or turns a vague maintenance concern into bounded work.
| Question | Good Fable use | Cheaper path |
|---|---|---|
| How does this large repo fit together? | System map with risks, owners, and unknowns | Smaller model summarizes a narrow folder |
| Where could data leave the system? | Exposure inventory across auth, forms, logs, and webhooks | Engineer reviews one route family |
| How should we split a migration? | Sequenced plan with stop conditions and validation commands | Team writes tickets from an existing architecture decision |
| Is this branch ready to merge? | Diff review against the original plan and risk list | Normal code review handles a small, local change |
| Can an agent fix this today? | Task packet with scope, commands, and rollback path | Human edits the file directly |
A codebase audit is normal maintenance for software that earns its keep. Healthy projects still accumulate decision history, integration risk, and missing proof around old assumptions.
Use the Plan Window as Calibration
The right June sprint is small: one repo, one workflow, one budget, and one reviewer who can accept or reject the findings. The result should be a plan you would trust even if a different model executes the work later.
| Run | Input | Output |
|---|---|---|
| Repo map | README, scripts, app tree, env schema, deployment notes | System map and unknowns list |
| Risk review | Auth paths, API routes, forms, uploads, webhooks | Findings ranked by impact and evidence |
| Test review | Unit, integration, e2e, lint, typecheck commands | Missing proof and failing verification paths |
| Plan writing | Accepted findings | Self-contained tasks with commands and expected output |
| Human triage | Plans and evidence | Approved, rejected, or parked remediation list |
For webvise projects, the useful part is operational: Fable helps find where proof is missing, where a future change deserves a test, and where an agent plan needs a human owner.
webvise uses this audit shape for websites, apps, and AI workflows that need clearer plans before code changes. For a codebase or workflow that feels expensive to maintain, book a project call with one repo and one process you want reviewed.
Development practices are aligned with ISO 27001 and ISO 42001 standards.