What Judge Lin Actually Ruled

Judge Rita Lin's order does not just pause the Pentagon's supply chain risk label on Anthropic - it vacates the designation outright.

In a 59-page ruling issued Thursday, August 27, in the Northern District of California, Judge Lin found the Department of Defense had violated both the First Amendment, by retaliating against Anthropic for refusing to loosen limits on autonomous weapons and domestic surveillance, and the Fifth Amendment's due process guarantee, through what she called serious procedural problems in how the label was applied. Her order is blunt about the government's justification: "The empty invocation of national security is not a blank check to punish and retaliate against government critics."

The Contract Fight Behind the Label

The label did not appear out of nowhere - it followed a stalled 200 million dollar contract over how the Pentagon could deploy Claude on classified systems.

Anthropic wanted contract language barring its models from autonomous lethal weapons systems and from domestic mass surveillance; the Pentagon rejected those limits, and Defense Secretary Pete Hegseth's department designated the company a supply chain risk soon after. Judge Lin's order treats that sequence as the core evidence of retaliation: a company pushed back on how its own product could be used, and the department's response was not a security review but a punitive label.

A Designation Used On No Company Before Anthropic

Anthropic's designation was the first time the federal government had ever applied a public supply chain risk label to a US company under this procurement statute.

That matters for how much weight the ruling carries: because no earlier company had been designated this way, no earlier court had ever reviewed the designation's use as a punishment tool. Judge Lin's is the first written opinion applying constitutional scrutiny to it, so it is also necessarily the first precedent on it, not one ruling among many.

The Legal Template This Creates

Any vendor facing a similar national security blacklist now has a concrete court argument, not just a grievance: cite Lin versus the Department of Defense and argue the label followed protected conduct, not a documented risk finding.

That is a meaningful shift for AI labs and other contractors alike. Before this ruling, "this designation is retaliation" was a claim companies made in press statements. After it, it is a claim with a 59-page federal order behind it, laying out what a court will look for: a public statement made before the formal risk analysis, a designation timed to a policy dispute, and an agency unable to produce the evidence trail a genuine security review would leave.

What This Does Not Settle, In Europe Or In Washington

This is a US federal court ruling with no binding force on EU or UK regulators, and it settles nothing about Anthropic's other pending case.

A second lawsuit in Washington, DC, over a separate supply chain risk designation covering Anthropic's civilian government contracts is still unresolved, so the company technically remains blacklisted there for now. For European owners and operators, the honest read is narrower than a headline suggests: this ruling is persuasive, not precedential, outside US courts - a template argument, not a guarantee, for any company that finds itself blacklisted by a government for the wrong reasons.