ProductWidely confirmed7 publishers3 min readPublished Updated
A court vacated the Defense Department's supply-chain-risk label on Anthropic
A judge in the Northern District of California ruled on the merits and struck the designation down on constitutional, statutory and APA grounds. For vendor-risk teams, the lesson is that a federal exclusion can be scoped around and can then evaporate.
The Product Desk
What happened
- Pete Hegseth declared Anthropic a national security risk after it refused his demands over what Claude should be able to do, and Anthropic sued, with one challenge filed in the Northern District of California.
- The ruling found unlawful First Amendment retaliation, denial of Fifth Amendment pre-deprivation process, a violation of 10 U.S.C. section 3252, and arbitrary and capricious action under the APA.
- The court also held that the Department remains free to select the AI vendor of its choice, and that only the broad measures imposed on Anthropic were illegal and baseless.
Why it matters
- precedent A ban announced publicly before the required findings were made now carries a merits loss, so the next designation of that shape arrives with far less claim to being a settled condition of doing business.
- decision Vendor-risk owners who removed Anthropic to satisfy the contractor ban now have to decide whether removal was a compliance step or a permanent architecture choice, and the second one is much harder to reverse.
- cost Any organisation that ripped Claude out of its stack pays for the removal and again for the reinstatement, and the vacatur reimburses neither side of that bill.
- constraint The win restores eligibility rather than revenue, which limits how much comfort a supplier can take from litigation: a court can clear you back onto the list and buyers can still pass.
A designation like this one does its damage through other people's compliance departments. The order did not only tell federal agencies to stop using Anthropic's products. It told every defense contractor to stop doing business with the company, including work unrelated to the military [2]. That becomes a line in a vendor register, an exception ticket, a migration plan with a date on it. The office that wrote the order absorbs none of that work.
A federal supply-chain-risk designation can look like a fact of the world, the way an export rule is a fact of the world. The record says otherwise. According to Techdirt's account of the ruling, the punishment was broadcast on social media before the formal process of making the required findings had even begun [8], and the court has now ruled on the merits and given Anthropic both a permanent injunction and vacatur of the agency action [4].
The vacatur rests on four grounds: First Amendment retaliation, denial of the pre-deprivation process required under the Fifth Amendment, a violation of the governing statutory scheme at 10 U.S.C. 3252, and arbitrary and capricious action under the APA [3][6][7]. Four independent holdings [12]. To put the same ban back, the government has to cure all four, not the cheapest one.
The narrower half of the ruling matters more to a shortlist than the headline does. The court said the Department is free to select the AI vendor of its choice, and held only that the broad measures imposed on Anthropic were illegal and baseless [5]. So what came back is eligibility, not a contract. A vendor can be un-blacklisted by a judge on Thursday and still lose the deal on Monday for ordinary reasons, and nothing here obliges anyone to buy Claude.
One small filing detail with practical consequences: Techdirt notes that the court and Anthropic both used the administration's "Department of War" nickname, which Techdirt declines to adopt until Congress agrees to the renaming [11]. Anyone pulling the order for a risk file should search under both names.
The people this ruling is for are not the litigators. They are the vendor reviewers who received a directive with no findings attached and were expected to act on it inside a week. The test that would have helped them is a two-column sheet. Column one: the document the exclusion rests on, either a statutory finding with an administrative record or a press quote and a post. Hegseth's stated reasons included that Anthropic had "delivered a master class in arrogance" [10]. Column two: the cost of undoing compliance once you have complied.
A post in column one plus an expensive rip-out in column two is the case that just got vacated. The response that survives a Friday review is a documented pause rather than a purge: new spend frozen, the integration path and contract vehicle left standing until the litigation resolves. The tradeoff belongs in the same memo. Pausing means carrying a live compliance exposure while the case runs, and someone senior has to sign their name to that. Purging means paying for the removal and then paying again to reverse it, on the strength of an order a court found baseless [5].</body_markdown> </invoke>
What to watch
- An appeal or a stay of the vacatur, which would return defense contractors to the same ambiguity they just exited.
- A second attempt at designation built the other way round, with statutory findings and an administrative record made before any public announcement.
- Rulings in Anthropic's other challenges to the directives, since the California case was only one of them.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence85
- Adoption
- Insufficient
- Hype gap+10
- Incentives40
- Confidence80
Perspective Coverage
7 publishers- Builder
- Builder 26%
- Operator
- Operator 48%
- Investor
- Investor 26%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Pete Hegseth declared Anthropic a national security risk because it would not agree to his demands for what Claude should be able to do, and Anthropic sued to challenge the directives, including a challenge brought in the Northern District of California.
- [2]
The challenged action was to designate Anthropic a supply chain risk to national security, order all federal agencies to permanently stop using Anthropic's products, and ban all defense contractors from doing any business with Anthropic, even if unrelated to the military.
- [3]
The court found the challenged actions constituted unlawful retaliation in violation of the First Amendment, with Anthropic's protected speech a substantial motivating factor for the defendants' speech-chilling conduct.
- [4]
After an earlier preliminary injunction, the court ruled on the merits, finding in favor of Anthropic on most of its claims and granting all the relief it sought: both a permanent injunction and vacatur of Hegseth's agency action.
- [5]
The court stated that the Department is undisputedly free to select the AI vendor of its choice, but that the evidence demonstrated the broad measures imposed on Anthropic were illegal and baseless.
- [6]
The court found Anthropic was denied the pre-deprivation process required under the Fifth Amendment.
- [7]
The court found Hegseth's decision to designate Anthropic a supply chain risk violated the governing statutory scheme, 10 U.S.C. section 3252, and was arbitrary and capricious under the APA.
- [8]
The court noted that Anthropic's punishment was publicly broadcast via social media even before the formal administrative process of making the necessary findings to designate it a supply chain risk had begun.
- [9]
The California case was one of the challenges Anthropic brought against the directives, indicating more than one challenge was filed.
- [10]
The ruling records that Hegseth expressly tied Anthropic's punishment to its attitude and rhetoric in the press, including his statement that "Anthropic delivered a master class in arrogance", and that the President described Anthropic as a "RADICAL LEFT, WOKE COMPANY".
- [11]
Techdirt notes that the court and Anthropic referred to the Department of Defense by the Trump administration's nickname, Department of War, and that Techdirt will not use that name until Congress agrees to the renaming.
- [12]
The vacatur rests on four independent legal grounds.
Sources
7 independent publishers whose own reporting we read for this story.
- arstechnica.comTrump blacklisting of "woke" Anthropic deemed illegal by federal judge
2 articles · August 28, 2026
- gizmodo.comJudge Says the Pentagon’s Blacklisting of Anthropic Is Illegal
1 article · August 28, 2026
- mashable.comTrump administration illegally designated Anthropic as a supply chain risk, judge rules | Mashable
1 article · August 28, 2026
- techdirt.comPete Hegseth And His Department Of Unconstitutional Revenge Lose Again In California
2 articles · August 28, 2026
- thenextweb.comUS judge strikes down Pentagon blacklist of Anthropic as illegal retaliation
1 article · August 28, 2026
- theverge.comAnthropic was illegally blacklisted by the Trump administration, court rules
1 article · August 27, 2026
- wired.comA Judge Has Blocked the Pentagon’s Attempt to Blacklist Anthropic
2 articles · August 27, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- First Amendment retaliationFollow
- National-Security Supply-Chain Risk DesignationFollow
- Government AI procurement and authorisationFollow
- Military AI use policyFollow