Judge Lin blocks the Pentagon's supply-chain-risk designation of Anthropic for want of a record
The Pentagon labeled a vendor a supply chain risk by social media post, then conceded in court it had no evidence for the kill-switch capability it cited. Procurement should read designations as claims, not findings.
The Watch · Security desk
What happened
- A California judge temporarily blocked the Pentagon from labeling Anthropic a supply chain risk and from enforcing the instruction telling federal agencies to stop using the company's AI.
- Defense Secretary Pete Hegseth said he would direct the Pentagon to apply the label after President Trump's February 27 post ordering every federal agency to drop Anthropic's AI.
- The government argued the designation was necessary because Anthropic could implement a kill switch, and its lawyers later admitted to the court that they had no evidence of any such capability.
- Hegseth's post also barred any contractor, supplier or partner of the US military from commercial activity with Anthropic, a statement government lawyers conceded had no legal effect at all.
Why it matters
- Who has to decide decision Security and procurement teams have to ask for the underlying assessment before acting on a federal risk label, because the statutory steps behind this one were found incomplete and the technical allegation was withdrawn.
- Who's exposed exposure Any integrator that unwound Anthropic work to comply with the military-wide prohibition acted on wording the government itself says carries no legal force, which leaves it answering to its own counterparties instead.
- What it costs cost Whoever pulled Claude during the four weeks the directive stood pays for the removal and any re-onboarding; halting a designation does not refund migration work.
- What it sets up precedent A First Amendment finding now attaches to procurement risk labels used as punishment, which raises the drafting cost of the next designation and makes a documented record likelier.
Next story · Build · Oct 5
Pentagon's removal of Claude ran past Hegseth's six-month deadlineConfirmed2 publishers
The mechanics matter more than the politics for anyone who has to act on a label like this. Designating a supplier a supply chain risk requires the defense secretary to complete a specific set of actions, and Judge Rita Lin found that Hegseth did not complete them [17]. Letters to congressional committees asserted that less drastic steps had been evaluated and deemed not possible, and supplied no further detail [18]. The opinion runs 43 pages working through that gap [2].
The usage history cuts against reading the label as a product finding. The government ran Anthropic's Claude through much of 2025 without complaint, according to court documents [10]. Defense employees reached it through Palantir and had to accept a government-specific usage policy that cofounder Jared Kaplan said prohibited mass surveillance of Americans and lethal autonomous warfare, though his declaration to the court did not include the policy's terms, so that description is his and not a public document [11]. The disagreements started only when the government moved to contract with Anthropic directly [12].
Dates, because the adjectives in this fight are carrying a lot of weight. Trump's post was February 27 [4]; the order came March 26 [23], which is 27 days of federal agencies operating under an instruction to stop using a named vendor [22]. The seven-day appeal clock from the order puts a government filing at roughly April 2 [24]. The order is temporary [1], the government is expected to appeal [13], and Anthropic's second case in DC, built on a different segment of the law, has not been decided [3]. The company remains persona non grata with the government while that runs [16].
On the constitutional side, Lin wrote that the government "set out to publicly punish Anthropic for its 'ideology' and 'rhetoric,' as well as its 'arrogance'" and found the company on solid ground in its First Amendment claim [8]. She read the designation as effectively naming Anthropic a saboteur of the government, and found insufficient evidence for that [9]. Her order also forbids the government from fulfilling what Hegseth and Trump promised [14]. Dean Ball, who worked on AI policy in the Trump administration and filed a brief supporting Anthropic, called it a devastating ruling in which Anthropic was likely to prevail on essentially all of its theories [20]; that is a supporter's characterization of a preliminary order, not a final judgment.
The practical residue for a vendor review: a designation whose supporting record cannot be produced on demand is one party's position in a contract dispute, and it should be weighted that way alongside your own testing.
What to watch
- Whether the government files its appeal inside the seven-day window and whether it asks for a stay of Lin's order.
- The DC ruling on Anthropic's second case, which attacks the designation under a different segment of the law.
- Whether any federal agency or defense integrator publicly restores Claude access while the designation is halted.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence74
- Adoption30
- Hype gap+8
- Incentives55
- Confidence70
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
A California judge temporarily blocked the Pentagon from labeling Anthropic a supply chain risk and from ordering government agencies to stop using its AI; the order was issued last Thursday.
- [2]
Judge Rita Lin's opinion in the case runs 43 pages.
- [3]
Anthropic has a second case against the designation, filed in DC, that has yet to be decided and that makes similar allegations while referencing a different segment of the law.
- [4]
President Trump's Truth Social post on February 27 referenced "Leftwing nutjobs" at Anthropic and directed every federal agency to stop using the company's AI.
- [5]
Defense Secretary Pete Hegseth echoed Trump's post soon after, saying he would direct the Pentagon to label Anthropic a supply chain risk.
- [6]
The government said the supply chain risk designation was necessary because Anthropic could implement a "kill switch," but its lawyers later had to admit it had no evidence of that, the judge wrote.
- [7]
Hegseth's post stated that no contractor, supplier, or partner that does business with the United States military may conduct any commercial activity with Anthropic.
- [8]
The judge concluded Anthropic was on solid ground in complaining its First Amendment rights were violated, writing that the government "set out to publicly punish Anthropic for its 'ideology' and 'rhetoric,' as well as its 'arrogance' for being unwilling to compromise those beliefs."
- [9]
Labeling Anthropic a supply chain risk would essentially identify it as a "saboteur" of the government, for which the judge did not see sufficient evidence.
- [10]
The government used Anthropic's Claude for much of 2025 without complaint, according to court documents.
- [11]
Defense employees accessing Claude through Palantir were required to accept terms of a government-specific usage policy that Anthropic cofounder Jared Kaplan said prohibited mass surveillance of Americans and lethal autonomous warfare; Kaplan's declaration to the court did not include details of the policy.
- [12]
The disagreements began only when the government aimed to contract with Anthropic directly.
- [13]
The government is expected to appeal the decision.
- [14]
The judge's order halts the designation, prevents the Pentagon from enforcing it, and forbids the government from fulfilling the promises made by Hegseth and Trump.
- [15]
The government was given seven days to appeal the order.
- [16]
Until the matter is settled, Anthropic remains persona non grata with the government.
- [17]
Making the designation requires the secretary to take a specific set of actions, which the judge found Hegseth did not complete.
- [18]
Letters sent to congressional committees said that less drastic steps were evaluated and deemed not possible, without providing further details.
- [19]
The government's own lawyers admitted on Tuesday that the Secretary does not have the power to bar contractors from doing business with Anthropic, and agreed with the judge that the statement had "absolutely no legal effect at all."
- [20]
Dean Ball, who worked on AI policy for the Trump administration but wrote a brief supporting Anthropic, described the order as "a devastating ruling for the government, finding Anthropic likely to prevail on essentially all of its theories for why the government's actions were unlawful and unconstitutional."
- [21]
The MIT Technology Review account of the ruling is dated March 30, 2026.
- [22]
Federal agencies operated under the directive to stop using Anthropic's AI for 27 days before the order halted the designation.
- [23]
The order halting the designation was issued Thursday, March 26, 2026.
- [24]
The seven-day appeal window from the order closes on or about April 2, 2026.
Sources
2 independent publishers whose own reporting we read for this story.
- securityweek.comJudge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’
1 article · August 31, 2026
- technologyreview.comThe Pentagon’s culture war tactic against Anthropic has backfired | MIT Technology Review
1 article · August 29, 2026
Topics and entities
Topics
- First Amendment retaliation
- National-Security Supply-Chain Risk Designation
- Government AI procurement and authorisation
- Military AI use policy
Entities
- OpenAI
- Institute for Law and AI
- Claude
- Palantir
- Donald Trump
- Pentagon
- Pete Hegseth
- Rita F. Lin
- Anthropic