US District Judge Rita Lin of the Northern District of California has granted Anthropic a preliminary injunction against the Pentagon’s supply chain risk designation — ordering the Trump administration to rescind the label that had threatened to cut Anthropic off from hundreds of millions of dollars in government contracts. In a 43-page ruling, Judge Lin was unusually direct: she called the designation “an attempt to cripple Anthropic” and described the government’s conduct as “classic illegal First Amendment retaliation.”
What the Judge Ruled
Judge Lin’s ruling addressed the core legal question at the center of Anthropic’s lawsuit: whether the government had legitimate national security grounds to designate Anthropic a supply chain risk, or whether the designation was retaliation for Anthropic’s public opposition to the Pentagon’s contracting demands.
The judge found the answer clearly in Anthropic’s favor. Her ruling stated: “Nothing in the governing statute supports the Orwellian notion that an American company may be branded a potential adversary and saboteur of the U.S. for expressing disagreement with the government.”
On the question of the Pentagon’s stated rationale — that Anthropic’s restrictions on autonomous weapons and mass surveillance made it a supply chain threat — Lin was dismissive: “Defendants’ designation of Anthropic as a ‘supply chain risk’ is likely both contrary to law and arbitrary and capricious. The Department of War provides no legitimate basis to infer from Anthropic’s forthright insistence on usage restrictions that it might become a saboteur.”
Most significantly, she found that the Pentagon’s own records revealed the real motivation: “The Department of War’s records show that it designated Anthropic as a supply chain risk because of its ‘hostile manner through the press.'” In other words, the government’s internal documentation confirmed that the blacklisting was triggered by Anthropic going public with its concerns about the contract terms — not by any genuine security assessment.
The Scope of the Injunction
The preliminary injunction blocks two distinct government actions:
- The Pentagon’s formal supply chain risk designation of Anthropic
- President Trump’s February directive ordering all federal agencies to “immediately cease” all use of Anthropic’s technology
Importantly, Judge Lin’s order does not require the Pentagon to use Anthropic’s products. The DoD retains the right to choose different AI vendors. What it cannot do, under this ruling, is use the supply chain designation mechanism to coerce Anthropic into accepting contract terms it had refused — or to extend that coercion to the private sector contractors who work with the military.
The ruling paused implementation for one week to allow the government time to seek emergency relief from an appeals court. The Trump administration’s acting attorney general Todd Blanche called the decision a loss for “military readiness” and said “military authority belongs to the Commander-in-Chief, not a tech company.” The government is expected to appeal.
The Context: What Anthropic Refused and Why
The dispute traces to a July 2025 contract under which Claude became the first frontier AI approved for use on the Pentagon’s classified GenAI.mil platform. When the DoD began negotiating deployment on expanded classified systems in September, it pushed for language allowing “any lawful purpose” — specifically including domestic mass surveillance and autonomous weapons without human oversight. Anthropic refused those uses as non-negotiable red lines. The Pentagon’s response was to designate Anthropic — an American company — a supply chain risk using a statute previously reserved for foreign adversaries.
Three deals worth over $180 million that were close to signing fell apart as a direct result. Defense contractors including Amazon, Microsoft, and Palantir received notifications requiring them to certify they were not using Claude in military work. The injunction halts that contractor-certification requirement for now.
Why Legal Experts Say the Fight Isn’t Over
Most observers expect Anthropic to ultimately prevail on the merits of its case. But the path is complicated. The Trump administration relied on two separate statutes to justify the supply chain designation — and one of them can only be adjudicated in the D.C. Circuit, which previously declined to grant emergency relief. The injunction from the California court addresses one statutory basis but not both. The Trump administration also retains meaningful leverage: it can attempt to revise the designation’s legal basis to address the court’s specific objections, potentially reinstituting it on different grounds. The injunction is a significant win. It is not a resolution.
Conclusion
Judge Lin’s ruling is the strongest judicial rebuke yet of the Trump administration’s use of procurement law to pressure AI companies over policy disagreements. Whether it holds on appeal — and whether Anthropic’s broader legal strategy succeeds — will shape how every AI company negotiates with the federal government going forward. Browse our directory to follow Claude and the policy battles reshaping the AI industry.
