A supply-chain risk designation is an administrative act, and the statute that authorises it comes with homework. Lin's March opinion found no adequate analysis of less restrictive measures, despite a statutory requirement that the Pentagon consider them [10]. The same opinion records that Anthropic had already passed government vetting and supplied Claude for classified work [9]. Anthropic said Claude was in use for intelligence analysis, operational planning, modelling, simulation and cyber operations [17]. A supplier cleared for classified work and simultaneously named a supply-chain risk is a contradiction. The record left it unexplained.
Treat the outcome the way you would treat a benchmark table from someone else's workload. Four parts of the fact pattern have to hold before it transfers to your vendor. The vendor needs prior clearance, so the designation collides with the government's own paperwork [9]. The governing statute needs to impose a step the agency skipped [10]. There has to be protected conduct to retaliate against; Anthropic argued the designation exceeded the statute and punished it for publicly defending its usage limits [11]. And the vendor needs the balance sheet to reach a merits ruling, which Anthropic has: it said in May that it had raised $65 billion at an approximately $965 billion post-money valuation, with Altimeter Capital, Dragoneer, Greenoaks and Sequoia leading [14]. By contrast, a three-year-old inference startup with no classified history would be missing all four of those elements.
Timing is what the outcome actually turned on. Formal notice arrived on 4 March and the preliminary injunction followed on 26 March, which is 22 days [20]. The merits ruling came in August, roughly five months after notice [21]. Anything sitting behind Claude in a federal delivery path in early March needed a bridge measured in weeks at best and two quarters at worst, and by the time an order arrives at the end of that window, those sprints are already lost.
Procurement mechanics kept running in parallel. The General Services Administration continued to list Claude Enterprise as available to all federal agencies for $1 through September 2026 [13]. The constraint here was the designation, not price. A dollar listing means nothing while the vendor stays designated.
Two gaps should stop you from rewriting an architecture decision record on the strength of the headline. The available reporting does not establish whether individual agencies retain separate procurement or security restrictions [18], so a government-wide order is not an approval at your program office. It also does not establish that the August ruling expressly preserves Anthropic's two contractual use restrictions [19], which are the terms the fight was about. Dario Amodei said Anthropic would not knowingly provide products for fully autonomous weapons because current frontier models are not reliable enough, and described mass domestic surveillance as incompatible with democratic values [15]. He also said the company would support a transition to another provider while avoiding any disruption to ongoing military planning, operations or other critical missions [16]. That last sentence is the vendor writing down its own exit path, and it is the part a continuity plan can use.
