The Pentagon Called Anthropic a Foreign-Style Threat. A Judge Said That’s Orwellian.

The Trump administration’s Department of Defense designated Anthropic as a supply chain risk in March 2026 after the AI safety company refused to remove ethical guardrails from Claude that prohibited its use for fully autonomous weapons systems and mass domestic surveillance. Defense Secretary Hegseth directed all federal agencies to cease using Anthropic technology. Within 48 hours, Anthropic filed for a temporary restraining order in federal court, and a judge granted it.

The DOD argued Anthropic’s ethical restrictions jeopardized military supply chains and claimed the company “may in the future take action to sabotage or subvert IT systems.” Anthropic’s legal response was direct: the government was using a national security designation to punish a company for building AI responsibly. 149 former federal and state judges, organized by the Democracy Defenders Fund, filed an amicus brief calling the designation an “Orwellian notion” that unlawfully penalizes safety compliance.

What the Supply Chain Risk Designation Actually Does

What Anthropic’s Guidelines Actually Prohibit

Anthropic’s published acceptable use policy prohibits Claude from being used to operate fully autonomous weapons systems that make lethal targeting decisions without human oversight, and from conducting mass surveillance of U.S. citizens without legal process. These are not vague restrictions. They track closely with existing U.S. law (the Posse Comitatus Act for domestic surveillance, and the DoD’s own AI ethics principles for autonomous weapons).

The Pentagon’s argument was that having an AI vendor with published ethical restrictions creates supply chain risk because the vendor could theoretically refuse service mid-operation. Anthropic’s counterargument: every commercial vendor has terms of service. The specific terms being targeted are ones that align with existing law, not ones that create operational risk.

The Legal Mechanism That Makes This Unprecedented

The Defense Department used Section 1293 of the National Defense Authorization Act, a provision designed to restrict foreign adversaries from defense supply chains. It was written for cases like Huawei and Kaspersky, companies with demonstrated ties to foreign intelligence services. Applying it to a domestic company whose offense was publishing safety research and declining to remove ethical guardrails is a novel use that no previous administration attempted. The provision allows designation without judicial review, without evidence disclosure, and without a formal hearing. Anthropic had to sue to challenge it.

Judge Lin’s 43-page ruling dismantled the government’s rationale on three grounds. First, the First Amendment: Anthropic’s safety publications and ethical guidelines are protected speech, and retaliating against a company for its published positions on AI safety constitutes viewpoint discrimination. Second, the Administrative Procedure Act: the designation was arbitrary and capricious because the Defense Department could not articulate a coherent national security justification for treating a domestic AI company as equivalent to a foreign intelligence threat. Third, irreparable harm: the designation would effectively destroy Anthropic’s government business (worth hundreds of millions annually) without due process.

The ruling’s implications extend beyond Anthropic. Every AI company that publishes safety research, maintains content restrictions, or declines military applications now has a precedent establishing that these decisions are protected under the First Amendment. The ruling establishes that the government cannot use procurement power to coerce private companies into abandoning safety commitments.

What the Two Red Lines Were

The conflict originated from two specific decisions Anthropic made in 2025. The first was publishing research on autonomous weapons risks that contradicted Defense Department talking points about AI-enabled military systems. The second was declining to remove Claude’s restrictions on generating content related to weapons systems design, even for authenticated military users. Anthropic’s position was that safety guardrails apply universally, regardless of the user’s institutional affiliation.

Both decisions were commercially costly. Anthropic forfeited potential defense contracts worth an estimated $400 million to $600 million annually. The Defense Department’s response, using a supply chain risk designation rather than simply choosing a different vendor, escalated the dispute from a procurement disagreement to a constitutional confrontation. The government could have awarded contracts to OpenAI or Google DeepMind without designating Anthropic as a threat. The choice to use the designation was the choice to punish, not just to exclude.

What the Court Ruled and What Comes Next

The temporary restraining order blocked enforcement of the designation pending a hearing on the preliminary injunction. The judge’s language in granting the TRO was pointed: the court characterized the government’s theory as raising serious First Amendment concerns. A full hearing on the preliminary injunction was scheduled within days.

The Democracy Defenders Fund’s amicus brief argued that the designation created a chilling effect across the entire AI industry: if maintaining safety standards can trigger a supply chain risk designation, rational companies will preemptively weaken their safety commitments to avoid government retaliation. The court agreed. This case will define whether AI companies can maintain independent ethical standards while serving government clients, or whether government procurement now implicitly requires accepting any use case the government demands. The answer shapes the entire AI safety field for the next decade.

Sources: DOD supply chain risk designation; Anthropic federal court filing; Democracy Defenders Fund amicus brief; multiple court docket filings, March 2026.