Judge Voids Anthropic Blacklist—but a Second Pentagon Case Remains

U.S. District Judge Rita F. Lin voided the federal measures challenged by Anthropic on August 27, 2026, finding that officials retaliated against the AI company for publicly defending limits on military use of Claude. The 59-page summary-judgment order dated August 27 found First Amendment retaliation, a Fifth Amendment due-process violation and statutory and administrative-law defects in the Pentagon’s supply-chain-risk designation.

The ruling removes the designation and broader government restrictions considered by the Northern District of California, but it does not fully reopen the Pentagon to Anthropic. A separate and narrower Anthropic case remains pending in the federal appeals court in Washington, leaving another Pentagon procurement measure unresolved.

Why Lin found retaliation rather than a security judgment

The First Amendment issue was not whether the Pentagon had to purchase Anthropic’s technology. Lin emphasized that the department remained free to select another vendor. The constitutional violation arose from imposing wider penalties after Anthropic publicly argued that Claude should not be used for mass surveillance of Americans or lethal autonomous warfare, while the government sought contractual permission for all lawful uses.

The order found direct evidence connecting the measures to Anthropic’s protected speech. Public statements attacked the company’s ideology and “arrogance,” the designation was announced before the supporting review was completed, and the government’s risk memorandum treated Anthropic’s criticism and negotiating position as reasons it could not be trusted.

The record also failed to establish the asserted sabotage risk. According to the order, the government did not identify a technological danger unique to Anthropic, while officials continued to pursue contractual arrangements and other sensitive work involving the company after deciding that it posed a supply-chain risk. Lin concluded that the stated security rationale conflicted with the government’s own conduct.

Due process and procurement law independently invalidated the measures

The Fifth Amendment holding rested on what the court described as a protected “stigma-plus” liberty interest. Labeling Anthropic an adversary and a national-security supply-chain risk harmed its reputation, while the accompanying restrictions changed its legal position by excluding it from government opportunities and constraining its dealings with military contractors.

Anthropic received neither meaningful advance notice of the factual case against it nor an opportunity to respond before those consequences took effect. Lin found no emergency that justified bypassing pre-deprivation process because the dispute had developed during months of negotiations rather than from a newly discovered threat.

The designation also violated the Administrative Procedure Act and 10 U.S.C. § 3252. The court read that law as addressing the danger that an adversary could sabotage or subvert a covered system; an openly stated disagreement about permissible contract terms did not satisfy that standard. The administrative record also failed to establish that less intrusive measures were unavailable and did not comply with required procedures for assessing and communicating the alleged risk.

Lin rejected the government’s position that those defects were harmless. She treated the requirements as substantive safeguards intended to test whether extraordinary supply-chain authority was necessary, and found the final decision arbitrary and capricious because its rationale did not fit the wider record.

What the California judgment changes

The practical effect is best understood by separating the measures the judgment removes from procurement powers the government retains:

• Vacated: the Section 3252 supply-chain-risk designation and the sweeping directive barring military contractors, suppliers and partners from conducting commercial activity with Anthropic.
• Permanently blocked: implementation of the challenged presidential and Pentagon directives by the federal defendants covered by the judgment, subject to the order’s stated limits.
• Still permitted: an agency may select another AI provider, decline to award Anthropic a contract or take another procurement action that was independently available before the invalidated directives, provided it complies with applicable law.

The judgment makes the court’s earlier protection permanent and took effect immediately, while the government retains the option to appeal, according to the Guardian’s account of the final ruling. It removes the blanket restriction on military suppliers doing unrelated commercial business with Anthropic, but it neither awards the company a contract nor requires any agency to deploy Claude.

For the civilian agencies covered by the judgment, the invalidated government-wide directive no longer supplies a lawful basis for excluding Anthropic. Defense procurement remains more complicated because a separate designation issued under another statute was not resolved in the California case.

The D.C. Circuit dispute remains a live barrier

The appellate proceeding concerns a Pentagon determination under 41 U.S.C. § 4713. That measure can exclude Anthropic from covered Pentagon procurements and prevent defense contractors from using it as a subcontractor on work performed for the department. It is narrower than the invalidated directive because it does not prohibit contractors from using Anthropic for unrelated work.

Anthropic’s petition challenging that measure is not an appeal from Lin’s final judgment. The D.C. Circuit docket for case 26-1162 records a June 17 filing, consolidation with case 26-1049 and a supplemental reply brief filed on August 3.

The distinction defines Anthropic’s current procurement position. The company is no longer subject to the government-wide exclusion, the Section 3252 designation or the broad contractor boycott invalidated in California. Contractors may therefore resume dealings that depended only on those measures, but Anthropic cannot treat new covered Pentagon work as fully available while the separate Title 41 designation remains in force.

The conflict consequently continues on two legal tracks. Lin’s judgment governs the restrictions vacated in California unless it is stayed or reversed, while the D.C. Circuit must still decide whether the narrower defense-procurement designation can stand.

Also read:

• Anthropic Hit a $47 Billion Run Rate as Pentagon Talks Reached Court
• Musk’s OpenAI Claims Are Dismissed, but the Federal Case Remains Open
• EU Pirate-Site List Remains Current—but It Is Not a Malware Blacklist