Anthropic's "Supply Chain Risk" Designation Stemmed from Its Refusing to Agree to Contract Terms, Not Its Speech

Read the original at Reason ↗
Cite

Volokh, E. (2026, September 25). Anthropic's "Supply Chain Risk" Designation Stemmed from Its Refusing to Agree to Contract Terms, Not Its Speech. Reason. https://reason.com/volokh/2026/09/25/anthropics-supply-chain-risk-designation-stemmed-from-its-refusing-to-agree-to-contract-terms-not-its-speech/

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

Reason · collected 2026-09-25 · by Eugene Volokh

Quick Summary

In a D.C. Circuit decision, Judge Gregory Katsas and Judge Neomi Rao ruled on Anthropic PBC v. U.S. Department of War. The court determined that while Anthropic's advocacy for AI safety is protected under the First Amendment, there was no causal link between this speech and the Department’s decision to exclude Anthropic from its supply chain. Instead, the exclusion stemmed from Anthropic's refusal to agree to a contract term requiring "all lawful uses" of AI products, which the Department deemed essential for national security. The timeline shows that despite Anthropic's long-standing advocacy since its founding in 2025 and continued public statements advocating for AI use restrictions, the Department only acted against Anthropic when negotiations over this specific contract term broke down.
Written by AI on 2026-10-02, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On September 25, 2026, the US Court of Appeals for the District of Columbia Circuit ruled against Anthropic, upholding the Pentagon's decision to blacklist the AI startup as a national security supply chain risk. This designation bars Anthropic from military contracts and restricts its technology use within the Defense Department. The court's 2-1 ruling supports the Pentagon’s stance that Anthropic's refusal to remove safety restrictions on its Claude model for autonomous weapons and mass surveillance was justified due to potential national security risks. Anthropic, which claims the designation has cost it billions in lost business, expressed disagreement with the decision but remains confident in pursuing further judicial review.

Written for “Pentagon Blacklists Anthropic” on 2026-10-31, grounded in this article and the 7 other(s) covering the same event.

Story

📰 Pentagon Blacklists Anthropic
Politics · 8 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads leans right and hedges 5% of its claims. Each row says how that neighbour differs.
New York Post
Hedges 0 of 4 claims Outlet record 66/100
Toronto Star
Hedges 0 of 3 claims Outlet record 64/100
Al Jazeera
⚖️ Leans right Hedges 1 of 14 claims Outlet record 60/100
Washington Examiner
Hedges 1 of 19 claims Outlet record 70/100
The Straits Times
⚖️ Leans right Hedges 2 of 14 claims Outlet record 66/100
ABC News (US)
Hedges 0 of 4 claims Outlet record 70/100
CBS News
⚖️ Leans left further left than this Hedges 0 of 3 claims Outlet record 66/100
“Article A discusses a court decision regarding Anthropic's First Amendment retaliation claim against the U.S. government, while Article B covers a federal court ruling allowing the government to label Anthropic as a supply chain risk.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
21
sentences that state something as happening or true
Uncertain
5%
1 of 21 hedged ("reportedly", "may", "according to")
Leaning
Leans right
of the writing, not the subject · beta estimate
Publisher signals
67/100
Reason's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
8
Politics
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-25 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Reason · 1044 article(s) · 4 correction(s) detected
Running correction rate · 4 correction(s)

Who wrote this

Eugene Volokh
168 article(s) here · 0 carrying a prediction
🔮 The hope would be to siphon votes away from Sullivan.
🔮 Defendants observe that Alibaba is not completely banned from appearing before the federal government—it could hire more in-house lobbyists or find a firm that is willing to forgo defense contractor clients….
🔮 Still others predicted that someone would eventually remove the context and circulate the resulting footage as though Mr. Piker had been speaking sincerely.
2026-10-27 · assertive framing · Hasan Piker Sues Scott Jennings
🔮 The Indictment alleges that Holmes posted on that account several statements against the Jewish community and Israel, including: "The jew will be destroyed and discarded," "From the river to the sea every Jew will die," "You inbred people will all die," and "Die Jew."
🔮 When reviewing whether the evidence was sufficient to support the issuance [or extension] of a 258E order, we consider [consistently with the statutory requirements] whether, "by a preponderance of the evidence, together with all permissible inferences," the judge could have found "that the defendant had committed '[three] or more acts of willful and malicious conduct aimed at a specific person committed with the intent to cause fear, intimidation, abuse or damage to property and that [did] in fact cause fear, intimidation, abuse or damage to property.'"
🔮 The Volokh Conspiracy Mostly law professors | Sometimes contrarian | Often libertarian | Always independent New from Reason: a look into what Javier Milei has accomplished and what it will take to make the most of Argentina’s window for real change.
2026-10-25 · assertive framing · Open Thread
🔮 The Volokh Conspiracy Mostly law professors | Sometimes contrarian | Often libertarian | Always independent New from Reason: a look into what Javier Milei has accomplished and what it will take to make the most of Argentina’s window for real change.
2026-10-24 · assertive framing · Open Thread
🔮 The original TRO—the one actually issued on July 20, 2025—named as plaintiffs eleven individuals and organizations who had never been party to the case; named as defendants two officials who were not actually sued; claimed, without evidence, that three post-secondary institutions had already cancelled DEI initiatives or programming because of the act; further declared, again without evidence, that staff at another school had been told not to discuss certain topics, including "historical interpretations involving systemic racism"; misquoted H.B. 1193 as applying to "race or sex stereotyping," "race or sex scapegoating," "critical race theory," and "institutional bias," despite none of these terms' appearing in the act's text; and referenced purported declarations of four individuals who do not appear in the record at all and may not even exist….
🔮 Critics fear that the Department of Justice's antitrust division will overlook mergers when it is convenient for the administration.
🔮 Body armor may be used more today than Defendants' understanding of its use in 1791.
2026-10-21 · assertive framing · Body Armor Ban Struck Down by N.Y. Federal Court
Also by Eugene Volokh
Hasan Piker Sues Scott Jennings
2026-10-27 · Reason
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 168 articles by Eugene Volokh →

Topics

Amodei Anthropic Anthropic PBC D.C. Circuit Department

Subjects

Anthropic ORG · 18× Department ORG · 9× Amodei ORG · 3× Anthropic PBC ORG · 1× Claude PERSON · 1× D.C. Circuit ORG · 1× Gregory Katsas PERSON · 1× Neomi Rao PERSON · 1× Pentagon ORG · 1× U.S. Department of War ORG · 1×

Narrative

By its own admission, Anthropic has advocated for use and safety restrictions since its founding: The company describes its own commitment to model safety as "the core of Anthropic's mission," and describes its use restrictions as reflecting "the very purpose for which [the] company was founded" and its "deeply held values."
framing: assertive · carried by 1 article(s) · first seen 2026-09-25

Claims (21 extracted, 1 hedged)

To succeed on such a First Amendment retaliation claim, the plaintiff or petitioner must prove that (1) it engaged in protected speech, (2) the government took materially adverse action against it, and (3) the speech caused the materially adverse action Anthropic has satisfied the first and second prongs of this test, but not the third. The First Amendment squarely protects Anthropic's advocacy regarding the safe and appropriate use of AI products. uncertain
Amendment → succeed → products
Moreover, the Department's exclusion of Claude from its supply chain plainly qualifies as a materially adverse action. asserted
exclusion → qualify → action
However, we can discern no causal connection between the two. asserted
we → discern → two
Instead, the record makes clear that the Department removed Anthropic from its supply chain not because of its advocacy, but because Anthropic refused to agree to a contract term the Department deemed essential to national security. asserted
Department → make → security
By its own admission, Anthropic has advocated for use and safety restrictions since its founding: The company describes its own commitment to model safety as "the core of Anthropic's mission," and describes its use restrictions as reflecting "the very purpose for which [the] company was founded" and its "deeply held values." asserted
company → advocate → which
But throughout 2024 and 2025, the Department never acted adversely to Anthropic. asserted
Department → act → Anthropic
Instead, it included Anthropic in a $200 million AI contract awarded in July 2025, and it sought to expand its relationship with Anthropic. asserted
it → include → Anthropic
Additionally, in January 2026, Amodei published a long article calling for "limits" and "safeguards" on the use of AI-powered weapons in democracies. asserted
Amodei → publish → democracies
But instead of retaliating against Anthropic because of this advocacy, the Department continued to pursue negotiations. asserted
Department → retaliate → negotiations
Only when the negotiations broke down did the Department take action: On February 24, the Secretary met with Amodei and demanded that Anthropic accept an "all lawful uses" term by February 27. asserted
Anthropic → break → February
On February 26, Amodei published a final, public refusal to assent to that term. asserted
Amodei → publish → term
On February 27, the Secretary announced his intention to exclude Anthropic from the Department's supply chain. asserted
Secretary → announce → chain
And on March 3, he made the formal, written determination required by the Supply Chain Security Act. asserted
he → make → Act
Among other things, the Secretary denounced Anthropic's "sanctimonious rhetoric," "virtue-signaling," and "Silicon Valley ideology." asserted
Secretary → denounce → rhetoric
Such rhetoric seldom provides a sound basis for judging the lawfulness of federal executive action. asserted
rhetoric → provide → action
In any event, for all its flourishes, the Secretary's social media post squarely addresses Anthropic's refusal to provide the "all lawful uses" contractual authorization. asserted
post → address → authorization
He described Anthropic's behavior as a "textbook case of how not to do business" with the Pentagon. asserted
He → describe → Pentagon
He reiterated the Department's demand for "full, unrestricted access to Anthropic's models for every lawful purpose in defense of the Republic." asserted
He → reiterate → Republic
nd he characterized Anthropic's refusal to provide that access as imposing an unacceptable "veto power over the operational decisions of the United States military." asserted
he → characterize → military
The nub of this dispute was contractual, and the First Amendment did not require the Department to continue a contractual relationship that it viewed as creating a national-security risk. asserted
it → require → risk
Judge Karen LeCraft Henderson didn't reach the First Amendment question, because she concluded that the action against Anthropic wasn't authorized by statute. asserted
action → reach → statute
💬Give feedback
🕘History 🎫Support