Pentagon's blacklist of Anthropic ruled illegal

U.S. District Judge Rita Lin ruled on Thursday that the Pentagon's designation of Anthropic as a supply chain risk was illegal, finding that the Department of Defense violated the First Amendment when it cut the company off from defense work. The San Francisco decision, covered by The New York Times, addresses one of the two designations behind the blacklisting.

At a glance

• The designation, issued in March, barred defense contractors from using Anthropic's technology in their work for the agency and made the company the first American firm publicly named a supply chain risk.
• Lin wrote that the Pentagon acted based on a desire to make a public example of Anthropic and that its stated grounds rested on no articulable basis, despite the deference owed on national security.
• Anthropic filed parallel suits in San Francisco and Washington, D.C., because two separate designations underpinned the action; until the D.C. case ends, the company technically remains a supply chain risk.

The dispute reads as the first court test of what happens when a frontier lab refuses a defense buyer's terms and says so publicly. Lin's reasoning ties procurement leverage to speech protections, which likely narrows the room for similar designations against other vendors. For Anthropic the immediate stake is commercial: reestablishing ties with the Pentagon could reopen business lines that were cut off in March, ahead of an IPO expected to be near-record.

Lin found the Pentagon acted on Anthropic's press criticism rather than an articulable basis

Lin found that while the government is owed deference on matters of national security, its action against Anthropic was not founded on any articulable basis. She wrote that the Department of Defense designated the company a supply chain risk "based on a desire to make a public example" out of it.

The order recites the government's own position: because of what it called Anthropic's increasingly hostile manner through the press and its criticism of the Department of War's views on AI use, the defendants said they cannot trust Anthropic to ensure the integrity of its models.

Neither the Constitution nor the federal statute invoked by Defendants allows them to impose sweeping penalties based principally on Anthropic's critique of the Administration's views.

The March designation followed collapsed talks over autonomous weapons and surveillance

The Department of Defense designated Anthropic a supply chain risk in March, after negotiations over how the military could use Claude spiraled out of control. Anthropic sought assurances that its technology would not be used for fully autonomous weapons or domestic mass surveillance, while the agency wanted unfettered access to Claude across all lawful purposes.

The talks escalated and then collapsed, and Anthropic became the first American company publicly named a supply chain risk. The label meant the company purportedly threatened U.S. national security, and it barred defense contractors from using Anthropic's technology in their work with the agency.

Two designations put the case in two courts, and the Washington one is still open

The Department of Defense relied on two distinct designations to justify its supply chain risk action, which meant they had to be litigated in two separate courts. Anthropic sued the Trump administration in San Francisco and in Washington, D.C., and the D.C. case is still ongoing, so the designation technically stands.

A company spokesperson told CNBC that Anthropic welcomes the court's ruling that the designation was unlawful and that it remains focused on working productively with the government to harness AI for national security. Anthropic has said the suits seek a return to the status quo before the designation, and would not require the Pentagon to restart its work with the company.

What the Washington case still decides

Lin's order clears the San Francisco half of the fight, but the second designation remains before a court in Washington, and no date for a decision there has been given. Anthropic stays a supply chain risk until that case resolves, and even a second win would restore only the ability to do business, not any obligation on the Pentagon to buy Claude again.