Pentagon AI Deals Exclude Anthropic

The Pentagon's most consequential move isn't who it picked — it's the tool it used to punish who it didn't. The 'supply chain risk' designation is an authority historically reserved for foreign adversary firms like Huawei, intended to keep equipment from hostile states out of sensitive networks. On February 27, 2026, Defense Secretary Pete Hegseth applied that authority to Anthropic, with formal letters dated March 3. According to Mayer Brown's contracting analysis, this was the first time the label has ever been turned on an American company, and the cascade is doing exactly what the label was designed to do against a foreign threat: cut the company out of the supply chain entirely.

The mechanics matter. Hegseth's directive bars any contractor, supplier, or partner doing business with the Pentagon from engaging in any commercial activity with Anthropic. CNBC and Military Times reporting documents defense-tech firms already dropping Claude to preserve their Pentagon revenue, and reporting that the Pentagon was asking Boeing and Lockheed Martin to assess their reliance on Claude reads as the Defense Production Act-style coercion it functionally is. The May 1 multi-vendor announcement, in which OpenAI, Google, Nvidia, Microsoft, AWS, SpaceX, Reflection and (shortly after) Oracle all received approval for IL6 and IL7 classified-network deployment, is the back half of the same play: lock Anthropic out of the highest-value AI revenue stream in defense, and let competitors fill the vacuum.

If Anthropic is genuinely a national-security supply chain risk, the NSA didn't get the memo. Axios reported on April 19 that the NSA was already using Anthropic's Mythos Preview model, and on May 1 Pentagon CTO Emil Michael went on CNBC and effectively confirmed the split: Anthropic-the-company is still blacklisted, but Mythos-the-model is 'a separate national security moment.' That phrasing isn't a reconciliation — it's an admission that a model the DoD has formally branded as too risky to source is, in fact, valuable enough that another arm of the same government is quietly using it.

This contradiction is more than embarrassing — it's a legal liability. Lawfare's analysis explicitly cites the NSA-Mythos arrangement as evidence that the supply chain finding is pretextual: the very capability the government is supposedly protecting itself from is the one its premier signals-intelligence agency wants. For Anthropic's lawyers, the paradox is gold. For Pentagon contractors trying to comply with Hegseth's no-commercial-activity rule, it's chaos: they're forbidden from doing business with a vendor whose flagship product the NSA is actively evaluating. The official posture is unified; the actual government is not.

Strip away the procurement language and the dispute reduces to two carve-outs Anthropic refuses to drop: fully autonomous weapons and mass domestic surveillance. Hegseth's February 24 ultimatum demanded that Claude be usable 'for all legal purposes.' Anthropic, in its own public statement, said its acceptable-use policy excludes precisely those two categories — and that it would not bend. CBS News and Anthropic's own filings confirm that the original July 2025 $200M contract had been signed under the company's AUP; the new demand was a unilateral attempt to renegotiate that floor.

The public response surfaced the political stakes faster than Washington did. Coverage of Anthropic's refusal drew tens of thousands of upvotes on r/news, with the dominant frame being a private company drawing a moral line the government wouldn't — commenters openly said they were switching from ChatGPT to Claude in protest. CNN's broadcast version, framed as Pentagon shunning Anthropic, reinforced the same narrative. Whatever the final legal verdict, Anthropic has already converted the standoff into a brand position no rival can match: the AI lab that wouldn't say yes to autonomous kill decisions or warrantless mass surveillance, even at the cost of $200M and a Pentagon relationship.

On the surface, the litigation looks split. Judge Rita Lin in the Northern District of California granted Anthropic a preliminary injunction on March 26, 2026, in a 43-page ruling that described the government's actions as 'retaliatory' for Anthropic's autonomous-weapons and surveillance restrictions. Two weeks later, on April 8, a D.C. Circuit panel denied Anthropic's request for a stay, citing 'weighty governmental and public interests' — leaving the designation in force pending full appellate review. That's how Hegseth could still execute the May 1 exclusion despite Lin's ruling.

Lawfare's Alan Rozenshtein, joined by Howard's Michael Endrias, argues the appellate posture is misleading: a stay denial is procedural, not a merits judgment. Their read is that the supply chain authority was statutorily designed for adversarial-state risk, not for punishing a U.S. vendor's contract terms, and that contemporaneous public statements from Trump and Hegseth — the 5:01 p.m. deadline, the agency-wide directive, the immediate no-business-with-Anthropic order — make pretext easy to prove. 'The statute wasn't built for this, the facts don't support it, and the courts will say so,' Rozenshtein writes; Endrias frames it more bluntly as 'designation as political theater: a show of force that will not stick.' If they're right, the May 1 vendor lineup is durable but the legal basis isn't, and the Pentagon's leverage erodes the moment a higher court reaches the merits.