Judge Rita Lin of the U.S. District Court for the Northern District of California issued a 59-page ruling on August 27 finding that the Pentagon's designation of Anthropic as a "supply chain risk" was unlawful, and vacated the designation. The ruling states that the Pentagon's motive was to make a public example of Anthropic's "arrogance," not any articulable security concern.
The chain of events starts in February. President Trump and Defense Secretary Hegseth announced that Anthropic would be designated a supply chain risk — a procurement penalty usually reserved for companies from adversarial nations — making Anthropic the first U.S. company to be publicly hit with the label. Once the designation took effect, defense contractors doing business with the Pentagon were required to certify that they were not using Anthropic's models in related work. In March, Anthropic sued, alleging the move was retaliation directed at the company.
Two Red Lines Neither Side Would Cross
The conflict traces back to what the model could be used for. The Pentagon wanted Claude available for "any lawful purpose," including the most sensitive military and intelligence scenarios. Anthropic insisted on keeping two lines off-limits: mass surveillance of U.S. citizens, and fully autonomous weapons systems. CEO Dario Amodei refused to strip out those guardrails for the military, and negotiations broke down.
At a July 30 hearing, Lin had already made her view plain, calling the government's position "disturbing" and "in tension with the First Amendment." A month later, her written ruling turned that into a formal finding: the government does get considerable judicial deference on national security matters, but the Pentagon's action here had no articulable basis at all.
"impose sweeping penalties based principally on Anthropic's critique of the Administration's views."
The ruling also found that the Pentagon's handling of the matter violated the Fifth Amendment's due process clause. The court's conclusion rests on two separate failures: the decision itself was wrong, and the process that produced it didn't hold up either.
An Obscure Clause Turns on a Domestic Target for the First Time
The procurement tool itself is worth a closer look. The supply chain risk designation comes from a rarely invoked government procurement statute, which in recent years has mainly been used to keep specific foreign vendors out of the federal supply chain — almost always targeting companies based overseas. This February marked the first time it was used against a homegrown company, one headquartered in San Francisco with customers spread across U.S. government agencies.
For defense contractors, the cost of the past six months has been real. Once the label took effect, compliance teams had to re-inventory their internal toolchains, swap out models already embedded in their workflows, and issue written certifications to their government clients. That kind of switch is rarely completed with a single notice — redoing security reviews, rewriting prompts, and rerunning evaluations all had to be factored in. The ruling vacates the designation, but the usage that migrated away over the past half year won't automatically flow back on its own.
The Label Isn't Fully Off Yet
Anthropic's own statement was notably restrained, saying the company "will continue to focus on working productively with the government to use AI for national security," without dwelling on the win. The Pentagon is expected to appeal.
Meanwhile, the federal appeals court in Washington, D.C., is still sitting on a separate, narrower case targeting another Pentagon designation rule. Until that case is resolved, Anthropic technically still carries the supply chain risk label. That is the most delicate part of this ruling — the legal conclusion has been written, but the administrative effect will have to wait for the next court date.
For readers tracking AI governance, the value here isn't in the outcome itself but in the boundary it exposes: when a model company writes what it won't do into its product terms and refuses to budge for its biggest buyer, how many tools does the government actually have, and how far can it push them. Lin's ruling gives one answer from a U.S. court — not necessarily the final one.
Sources: U.S. District Court for the Northern District of California ruling, CNBC, CocoLoop, NPR, Axios; page count, the judge's name, the sequence of the designation and the lawsuit, and both sides' statements were cross-checked across multiple reports.