Judge rules the Pentagon’s supply chain risk label for Anthropic unlawful

Federal Court Strikes Down Pentagon’s Supply Chain Risk Designation Against Anthropic

Activelifezero.com – A federal judge ordered the Department of Defense to remove its “supply chain risk” label from AI developer Anthropic on Thursday evening, ruling that the designation violated both the First and Fifth Amendments. The decision, handed down by Judge Rita Lin of the Northern District of California, marks a rare judicial rebuke of a national-security-adjacent action taken against a domestic technology firm and signals that the government cannot wield procurement designations as instruments of political punishment.

The Dispute: Guardrails Versus Military Autonomy

The confrontation between Anthropic and the Pentagon traces back to earlier this year, when the company declined to strip away internal safety guardrails embedded in its Claude language model. Those guardrails were designed to prevent the model from being deployed in autonomous weapons systems or mass-surveillance operations. Anthropic maintained that its models had not yet reached a level of reliability sufficient for such high-stakes applications, and that removing the safeguards would expose both the military and the public to unquantified risks.

Defense Secretary Pete Hegseth pushed back, arguing that the American military could not be told by a private corporation how to employ its own tools. In February, he took the extraordinary step of formally designating Anthropic a supply chain risk — a classification historically reserved for firms perceived to have ties to foreign adversaries. Once applied, the label barred every element of the Pentagon, including its contractors, from procuring or integrating Anthropic’s products into defense systems.

The Ruling: Retaliation, Not Risk Management

Anthropic filed suit in March. Judge Lin, a Biden-era appointee, spent months weighing the competing claims before concluding that the designation was not grounded in any articulable security concern. She rejected the Pentagon’s assertion that its inability to “trust” Anthropic constituted adequate justification for the label.

“The empty invocation of national security is not a blank check to punish and retaliate against government critics,” Lin wrote in her opinion.

According to the court’s findings, the evidence demonstrated that the department’s true motive was to make a “public example out of Anthropic for its ‘arrogance’ in criticizing the government, not based on any articulable basis to believe that Anthropic would actually sabotage its model.” In other words, the judge found the action was driven by animus toward a company that had publicly questioned military policy, rather than by any documented threat to operational security.

Lin further observed that other branches of the federal government continued to work with and meet Anthropic even after the Pentagon’s designation took effect.

“None of that is consistent with a genuine fear that Anthropic is a saboteur who would poison its software to harm national security,” she wrote.

Constitutional Dimensions

The opinion rests on two distinct constitutional grounds. First, Lin held that the designation “constituted unlawful retaliation in violation of the First Amendment,” meaning the government punished Anthropic for exercising its right to criticize military policy. Second, she found that the company “was denied the pre-deprivation process required under the Fifth Amendment,” because Anthropic was stripped of its government contracts and procurement eligibility without notice, hearing, or an opportunity to contest the designation before it took effect.

For readers unfamiliar with the supply chain risk mechanism: the label operates as a blanket procurement exclusion. It does not require a finding of espionage or foreign ownership; it simply removes a firm from the government’s approved vendor universe. Until now, the tool had been deployed almost exclusively against entities with perceived links to rival states. Its application to a U.S.-headquartered AI startup represented an unprecedented expansion of the instrument into the domestic technology sector.

Reactions and What Comes Next

An Anthropic spokesperson said the company “welcome[d]” the ruling and added:

“We remain focused on working productively with the government to harness AI for our national security so all Americans benefit from this technology.”

The Pentagon did not immediately respond to a request for comment. A second lawsuit brought by Anthropic, also connected to the supply chain risk label, remains pending before a court in Washington, D.C., meaning the legal fight over the designation’s broader consequences is not yet concluded.

The episode also carries a political dimension. In a June interview with Axios, President Donald Trump acknowledged that he had previously regarded Anthropic as a national security threat but said he no longer held that view — a public recalibration that underscores how quickly the administration’s posture shifted once the company proved willing to litigate rather than capitulate.

Broader Implications for AI and Defense Procurement

The ruling lands at a moment when the Department of Defense is accelerating its integration of large language models into command-and-control, intelligence-analysis, and logistics pipelines. Several AI firms are courting military contracts, and the question of how much autonomy a model should retain — and whether a vendor may impose usage restrictions on its own product — is likely to recur. By affirming that a procurement exclusion cannot serve as a vehicle for silencing corporate criticism, Judge Lin’s opinion sets a precedent that other technology companies may invoke if they face similar designations. At the same time, the decision does not resolve the underlying policy tension: whether a private model developer can condition its license terms on how the government deploys the technology, or whether the military retains the right to demand unrestricted access once a contract is signed. That question, unlike the constitutional one, remains open.