Back to News
PolicyAI Understanding briefing

Appeals court upholds Pentagon's supply-chain risk designation of Anthropic

A D.C. Circuit appeals court ruled 2-1 that the Pentagon may designate Anthropic as a supply-chain risk, effectively barring its Claude AI model from military and defense contractor use.

4 min readRead the linked source
Source-provided image accompanying Appeals court upholds Pentagon's supply-chain risk designation of Anthropic
Source referenceSource recorded
Publisher
tokenpost.com
Source type
Linked source — primary-source status has not been established.
Also cited

Story last revised

ContextUnderstand this in 60 seconds

Key terms

Guardrails
Rules, checks, and controls that limit unsafe or undesired model behavior.
AI Safety
A field focused on reducing harmful behavior, failures, and misuse risks in AI systems.
Test yourselfAI Ethics Quiz

What changed since publication

  1. First published
  2. A federal appeals court has officially ruled in favor of the Pentagon, upholding the supply chain risk label applied to Anthropic and confirming the legality of the Defense Department's ban on the company's AI products.
  3. The federal appeals court has upheld the Pentagon's labeling of Anthropic as a supply chain risk, allowing the Pentagon to continue to remove Anthropic's Claude models from its systems and bar the use of its products for Defense Department work.
  4. The new report adds that the Pentagon plans to replace Anthropic’s Claude with AI models from SpaceX, Google, and OpenAI, notes Anthropic’s potential IPO later this year, and details the company’s consideration of further appeals, providing fresh context beyond the original ruling.
  5. The D.C. Circuit Court of Appeals has issued a 2-1 ruling upholding the Pentagon's designation of Anthropic as a supply-chain risk, confirming the military's authority to exclude the company's AI models from defense systems due to usage restrictions.

What happened

The U.S. Court of Appeals for the D.C. Circuit ruled 2-1 on September 25 that the Department of Defense acted within its authority to label Anthropic a supply-chain risk. This decision upholds the Pentagon's exclusion of Anthropic's Claude AI model from military and defense contractor environments, a move stemming from a failed 2025 contract negotiation.

The D.C. Circuit's 2-1 decision on September 25 affirmed the Pentagon's authority to classify Anthropic as a supply-chain risk. The court determined that the Department of Defense had sufficient grounds to make this designation under federal supply-chain law, specifically noting that the government is not required to prove that a company intends to cause harm. Instead, the court found that the company's refusal to allow Claude to be used for all lawful purposes—including autonomous weapons and domestic surveillance—constituted a sufficient basis for the risk designation.

The conflict originated from a $200 million contract signed in July 2025. Negotiations to integrate Claude into the 'GenAI.mil' environment stalled when the Pentagon demanded unrestricted access for all lawful uses. Anthropic refused to remove its safety-based restrictions on autonomous weaponry and mass surveillance. Following a February 27 deadline for compliance, the Pentagon officially designated the company a risk on March 3 and subsequently signed AI agreements with seven other technology firms.

The court has stayed the effect of the ruling, allowing Anthropic to pursue further legal avenues, including a rehearing or a Supreme Court appeal. This ruling stands in contrast to a separate decision by a federal judge in San Francisco, who previously ruled that a different Pentagon designation against Anthropic violated the First Amendment.

Source details: tokenpost.com

Why it matters

This ruling establishes a significant legal precedent regarding the government's power to regulate AI providers based on their refusal to comply with specific deployment requirements. By affirming that the Pentagon does not need to prove malicious intent to designate a company as a supply-chain risk, the court has granted the military broad discretion to prioritize its operational requirements over the safety or ethical restrictions imposed by AI developers. This creates a clear conflict between private policies and federal defense procurement, potentially forcing other AI companies to choose between government contracts and their own internal usage guidelines.

The ruling highlights a critical tension between the federal government's need for unrestricted AI capabilities in defense and the safety-oriented constraints often embedded in commercial AI models. By prioritizing the Pentagon's operational requirements, the court has signaled that companies may be excluded from the defense industrial base if their safety prevent the military from utilizing the technology as it deems necessary.

This decision sets a high bar for AI companies attempting to challenge government procurement decisions on the basis of their own safety policies. It effectively grants the Department of Defense the power to dictate the terms of AI usage, regardless of the developer's stated ethical or safety objectives, provided the government can frame the restriction as a supply-chain risk.

Interactive Mechanism

Interactive Mechanism: How It Actually Works

Explore the underlying technology behind this development interactively.

Agent Lifecycle Stage:
1
User Intent & Planning: "Audit customer refund request #4092 and settle payment."
2
Tool Calling: Emits structured JSON call crm_get_transaction(id='4092').
3
Guardrail & Verification:Paused: High-value action requires human operator sign-off.
4
Final Settlement: Refund recorded, email receipt dispatched, and audit log stored.
Core takeaway: An AI agent is not just a language model—it is a closed loop of planning, tool invocation, and environment feedback. Production systems require self-healing retries and strict human approval guardrails.
Interactive Concept Check+10 Points
AI Ethics Quiz

Why can ethical evaluation not be reduced to one model score?

What to watch next

Anthropic retains the right to request a rehearing, seek an en banc review by the full D.C. Circuit, or petition the Supreme Court. The industry will be watching to see if Anthropic pursues these appeals or if the ruling forces a shift in how AI companies negotiate safety-related usage restrictions with federal agencies. Additionally, the existence of a conflicting ruling from a federal judge in San Francisco regarding a separate Pentagon designation suggests that legal uncertainty remains regarding the intersection of policies and First Amendment protections.

The primary focus is on Anthropic's next legal move. The company has the option to request a rehearing, seek a full-court review, or appeal to the Supreme Court. Any further litigation will likely clarify the extent to which the government can override private policies.

The discrepancy between this D.C. Circuit ruling and the earlier San Francisco federal court decision creates a split in legal interpretation that may eventually necessitate higher-level judicial intervention to resolve the conflict between national security procurement and First Amendment rights.

Related guides & quizzes

Updates and corrections

This canonical story is updated in place when the developing event materially changes. Its URL and original publication date never change.

  • The D.C. Circuit Court of Appeals has issued a 2-1 ruling upholding the Pentagon's designation of Anthropic as a supply-chain risk, confirming the military's authority to exclude the company's AI models from defense systems due to usage restrictions.
  • The new report adds that the Pentagon plans to replace Anthropic’s Claude with AI models from SpaceX, Google, and OpenAI, notes Anthropic’s potential IPO later this year, and details the company’s consideration of further appeals, providing fresh context beyond the original ruling.
  • The federal appeals court has upheld the Pentagon's labeling of Anthropic as a supply chain risk, allowing the Pentagon to continue to remove Anthropic's Claude models from its systems and bar the use of its products for Defense Department work.
  • A federal appeals court has officially ruled in favor of the Pentagon, upholding the supply chain risk label applied to Anthropic and confirming the legality of the Defense Department's ban on the company's AI products.
See the public corrections log
Found this useful?