Federal Judge Rules Pentagon’s Anthropic Supply-Chain Risk Label Illegal
A federal judge in California issued a landmark ruling on Thursday evening, declaring the Trump administration’s designation of AI company Anthropic as an Anthropic supply-chain risk unlawful. U.S. District Judge Rita Lin determined that Defense Secretary Pete Hegseth’s labeling of Anthropic as an Anthropic supply-chain risk violated the First and Fifth Amendments, citing “unlawful retaliation” against the company for its criticism of government policies.
The legal battle began earlier this year when Hegseth and President Donald Trump labeled Anthropic an Anthropic supply-chain risk, ordering all federal agencies—even those outside the defense sector—to cease working with the Claude AI maker. This sweeping action effectively barred the company from government contracts across multiple departments and represented an unprecedented use of the supply-chain risk designation against an AI company.
Why the Pentagon Labeled Anthropic a Supply-Chain Risk
The dispute originated from Anthropic’s firm stance on safety guardrails regarding how the Pentagon could use its AI models. The company set hard lines prohibiting the use of its technology for fully autonomous weapons and mass surveillance of American citizens. These ethical boundaries put Anthropic at odds with the Department of Defense, which sought broader operational flexibility.
The Pentagon pushed back against these restrictions, denying it would use Anthropic models for anything beyond lawful purposes while alleging that Anthropic was attempting to control military use of models it had sold to the government. This fundamental disagreement over usage rights and ethical deployment escalated into a full-blown legal conflict, ultimately resulting in the Anthropic supply-chain risk designation that now stands overturned.
Judge Lin’s ruling highlighted significant contradictions in the government’s position regarding the Anthropic supply-chain risk label. She noted the disconnect between this security designation and other administration actions, including Hegseth’s proposal to apply the Defense Production Act to Anthropic—a move that would classify the company as essential to national security rather than a threat to it.
The judge also pointed to the Department of Defense’s continued pursuit of contracts with Anthropic and its collaboration with the company’s new Mythos model for cybersecurity purposes. These ongoing business relationships directly undermined the government’s claim that Anthropic posed a genuine supply-chain risk requiring immediate and sweeping action.
Key Legal Arguments in the Anthropic Case
In her detailed ruling, Judge Lin emphasized that Anthropic “undisputedly lacks” any backdoor access to its technology once handed over to the DOD. This technical reality undermined claims that the company could secretly monitor or control military applications of its AI, weakening the national security justification for the Anthropic supply-chain risk designation.
The judge specifically addressed the government’s motivation, writing that the administration’s “words and deeds confirm that the challenged actions were based on a desire to make a public example out of Anthropic for its ‘arrogance’ in criticizing the government.” This finding of retaliatory intent proved crucial to the First Amendment violation determination.
Lin further asserted that “the empty invocation of national security is not a blank check to punish and retaliate against government critics.” She stated, “Though the Department of War is undisputedly free to select the AI vendor of its choice, the evidence demonstrates that the broad measures imposed on Anthropic were illegal and baseless.”
The judge also noted that Anthropic was denied due process as required under the Fifth Amendment. The government imposed the Anthropic supply-chain risk label without providing the company adequate opportunity to challenge the designation or present countervailing evidence before the sanctions took effect.
Anthropic’s Response and Ongoing Legal Challenges
An Anthropic spokesperson welcomed the court’s decision, stating, “We welcome the court’s ruling that this supply chain risk designation was unlawful. We remain focused on working productively with the government to harness AI for our national security so all Americans benefit from this technology.”
The company initially filed two complaints against the Department of Defense in March—one in California and another in Washington, D.C. While the California case has concluded in Anthropic’s favor with the Anthropic supply-chain risk label overturned, the D.C. suit continues to proceed through the courts. The outcome of that remaining litigation could have additional implications for how AI companies interact with government agencies.
TechCrunch has reached out to the Department of Defense for comment on the ruling, but the agency has not yet indicated whether it plans to appeal the decision or modify its approach to AI vendor designations going forward.
Implications for AI Companies and Government Contracts
This ruling sets a significant precedent for how government agencies can designate AI companies as security risks. The decision affirms that companies have constitutional protections against retaliation for expressing policy positions, even when national security claims are invoked. The Anthropic supply-chain risk case demonstrates that judicial oversight can check executive branch authority even in sensitive national security matters.
Key takeaways from the ruling:
Government agencies cannot use national security designations to retaliate against critics, as demonstrated in the Anthropic supply-chain risk case
Companies are entitled to due process before facing broad government exclusions based on security claims
Contradictory government actions—such as seeking contracts while issuing risk designations—can undermine claims of genuine security threats
AI companies retain rights to set ethical usage restrictions on their technology without facing unlawful retaliation
The ruling also raises questions about how the Pentagon will approach AI procurement going forward. If the government cannot use supply-chain risk designations to punish companies that set ethical boundaries, it may need to negotiate usage terms more transparently or seek legislative authority for restricting AI vendors.
As the AI industry continues to grow and intersect with government operations, this ruling may influence how future disputes over technology use, safety standards, and government contracts are resolved. Anthropic’s legal victory reinforces that companies can advocate for ethical AI deployment without facing unlawful retaliation, even when dealing with sensitive national security applications.
For other AI companies navigating government partnerships, this case provides important legal protection. The ruling establishes that the Anthropic supply-chain risk designation was not just procedurally flawed but substantively baseless, potentially discouraging similar actions against other technology vendors in the future. The decision may also encourage more AI companies to establish clear ethical guidelines for government use of their technology, knowing they have legal recourse if retaliated against.
The broader technology industry will be watching the remaining D.C. litigation closely, as its outcome could further define the boundaries of government authority over AI vendors and the constitutional protections available to companies that engage in policy advocacy.
