Anthropic and the Department of War

Layer	What	When
Object held	A supply-chain-risk designation, built for vendors tied to a foreign adversary, pointed at a domestic company's use limits.	when the designation was pointed at a domestic firm
Where it started to move	Talks over "all lawful purposes" access collapsed. The tool was used on a policy refusal, with no foreign tie alleged.	same moment: no foreign tie was ever alleged
Where cost arrives first	The company: cut off from the Pentagon contractor ecosystem, fighting the label in two courts at once.	once Pentagon contractor access was cut
Difference carried	A designation with authority to flag infiltration risk was used to end a contract dispute. A judge vacated it as unlawful retaliation; a parallel case is still open.	after a judge vacated the label, with a parallel case still open

What the supply-chain-risk label was built to catch

Supply-chain risk designation is a tool built for one thing: flagging vendors tied to a foreign adversary who could infiltrate or sabotage military systems. In February 2026, the Department of War pointed it at an American company for the first time, not over any foreign tie, but over Anthropic's refusal to drop its guardrails against autonomous weapons and mass domestic surveillance.

What	What actually happened
Designed to flag	Vendors connected to a foreign adversary capable of infiltrating or sabotaging military systems.
Used here on	A domestic company, over a policy refusal, with no foreign tie alleged.
Congress's own procedure for it	Skipped, per Anthropic's suit: one of five claims, alongside two First Amendment retaliation counts and a Fifth Amendment due-process count.

Talks between Anthropic and the Pentagon over "all lawful purposes" access collapsed in February 2026. Defense Secretary Pete Hegseth designated the company a supply-chain risk and directed agencies to sever all commercial ties. Anthropic sued in two courts at once, and by August a federal judge had vacated the designation as unlawful retaliation, though a separate appellate case is still open. (The department's legal name remains Defense; "War" is a secondary title authorized in 2025, which this case's short name reflects.)

Timeline

2025 to early 2026	Models run on classified systems while the company keeps its two use restrictions in place.
Jan to Feb 2026	Talks over "all lawful purposes" access collapse.
Feb 2026	Secretary Hegseth designates Anthropic a supply-chain risk, a label previously reserved for firms tied to a foreign adversary, and orders agencies to sever ties.
Mar 9, 2026	Anthropic files a five-count suit in N.D. Cal. and, the same day, petitions the D.C. Circuit to review the designation directly.
Apr 8, 2026	The D.C. Circuit declines to block the designation while its own review proceeds.
Jun 2026	President Trump says he no longer considers Anthropic a national-security threat, even as the designation stays formally in force.
Aug 27, 2026	Judge Rita Lin vacates the designation as unlawful retaliation and a due-process violation, via a permanent injunction; a seven-day stay is denied. The D.C. Circuit case (a challenge under a different statute) remains open, and a Pentagon official afterward said it still treats Anthropic as a supply-chain risk — so the label isn't fully gone yet.

Who meant what, and what happened instead

The use cases were the surface. Underneath was a quieter question: who gets to define what the model is allowed to be, and whether a tool built for one purpose can be repointed at a different one.

Actor	Authority held	What happened instead
Secretary Hegseth / DOD	Use the supply-chain-risk tool to cut off a vendor whose guardrails conflicted with what the military said it needed, without going back to negotiate contract terms.	A federal judge found the designation itself unlawful retaliation and a due-process violation, not a legitimate use of the tool at all.
Anthropic	Hold two use-limits (no autonomous weapons, no mass domestic surveillance) while continuing other military work.	Got cut off from the entire Pentagon contractor ecosystem for months, and had to fight the label in two separate courts to get relief.
Judge Rita Lin (N.D. Cal.)	Rule on whether the designation followed the procedure Congress built into the underlying statute.	Found it hadn't, and vacated it, though the parallel D.C. Circuit case from the same March filing is still open, technically leaving the label standing until it resolves.
President Trump	Directed agencies to sever ties in February, calling Anthropic a national-security threat.	In June, told Axios he no longer viewed Anthropic as a threat, but that remark addressed a separate Commerce Department dispute over Fable 5 and Mythos 5, not this designation; the designation itself stood until Judge Lin vacated it in August.

Sources

Primary	Anthropic PBC v. U.S. Department of War, case docket and summary judgment order (N.D. Cal., Aug. 27, 2026)
Primary	Lawfare, "Anthropic Sues Defense Department Over Supply Chain Risk Designation" (Mar. 9, 2026)
Reporting	CNN, "Judge rules the Pentagon's supply chain risk label for Anthropic unlawful" (Aug. 27, 2026)
Reporting	CNBC, "Anthropic loses appeals court bid to temporarily block DOD ruling" (Apr. 8, 2026)
Reporting	Nextgov/FCW, "Judge rules Anthropic supply chain risk designation was 'illegal and baseless'" (Aug. 28, 2026)

← Case library