Judge Rules Pentagon's 'Supply Chain Risk' Blacklisting of Anthropic Was Illegal

A federal judge in San Francisco ruled Thursday that the Pentagon's "supply chain risk" designation of Anthropic, the AI lab behind Claude, was illegal, holding that the Department of War used an obscure procurement statute to punish the company for refusing to allow military use of its models.

U.S. District Judge Rita Lin, a Biden appointee sitting in the Northern District of California, issued a 59-page order on August 27, 2026 finding the blacklisting "illegal and baseless" and ruling that the Pentagon had violated Anthropic's First Amendment rights. It is the first time a court has struck down the use of the supply-chain-risk label against a U.S. company, according to the New York Times report on the ruling.

Lin accepted Anthropic's argument that the designation was retaliation for the company's stated refusal to allow Claude to be used for U.S. surveillance or autonomous weapons. Anthropic has said the policy stance could cost it "billions in lost business," a figure the company itself put forward in filings rather than one the court quantified in damages. The exact wording of Lin's reasoning circulated in the Reuters wire copy via KFGO and WKZO; any quoted line should be cross-checked against the docket PDF before being leaned on.

In her order, Lin wrote that the Pentagon had designated Anthropic "based on a desire to make a public example out" of the company and that an "empty invocation of national security" could not serve as "a blank check to punish and retaliate against government critics." The supply-chain-risk label is a procurement designation, not a security classification. It is the tool the government uses to bar specific vendors from certain contracts on national-security grounds, typically for hardware or software tied to adversarial supply chains. Anthropic's case marks the first public use of the label against a U.S. company and the first time a court has ruled on its use as a punishment tool.

Anthropic filed the suit on March 9, 2026, as Anthropic PBC v. U.S. Department of War, case number 3:26-cv-01996, in the Northern District of California. The complaint alleges First Amendment retaliation and Fifth Amendment due-process violations, with Michael Mongan as counsel of record. Anthropic's corporate disclosures on the docket name Google LLC and Amazon Web Services, Inc. as affiliates.

The ruling does not end the litigation, and two appellate tracks are now in motion. In April 2026, a separate D.C. Circuit panel of Judges Gregory Katsas and Neomi Rao, both Trump appointees, denied Anthropic's emergency request for a stay of the underlying designation. The Trump administration is separately appealing Lin's preliminary injunction to the Ninth Circuit. The two rulings operate on different questions at different procedural moments, and reading them as a single outcome would obscure the posture.

Lin's reasoning forecloses the use of the supply-chain-risk designation as a First Amendment retaliation tool against any company that draws a public policy line the executive branch dislikes. It does not foreclose the underlying policy fight over whether Claude should be used for surveillance or autonomous weapons, or whether the Pentagon can pursue procurement limits through other channels. The ruling is narrow on the mechanism, not on the policy.

The Ninth Circuit's briefing schedule on the administration's appeal is the next concrete milestone. Lin's Thursday order sets the terms the government has to meet to keep the designation in place while the appeal runs.