Judge Questions Trump Admin's Evidence on Anthropic Supply-Chain Risk

TL;DR
- A federal judge in California blocked the Trump administration’s effort to label Anthropic a “supply-chain risk,” saying the government likely acted unlawfully and without adequate evidence.
- The ruling also pauses a presidential directive that ordered federal agencies to stop using Anthropic’s AI, while giving the administration time to appeal.
- The decision heightens questions about how far the government can go in restricting AI vendors over security concerns without clear statutory or factual support.
A federal judge has thrown a major wrench into the Trump administration’s effort to restrict Anthropic, finding that the government likely failed to justify its decision to brand the AI company a national-security risk. In blocking the designation, the court signaled that the administration’s evidence appeared thin and that its actions may have crossed legal and constitutional lines.
What the judge ruled
U.S. District Judge Rita Lin issued a temporary injunction blocking the Pentagon from classifying Anthropic as a supply-chain risk and from enforcing a related presidential directive that told federal agencies to stop using the company’s technology. The order restores the status quo while the case proceeds, but it does not require the Pentagon to use Anthropic’s tools or bar the agency from switching to another provider through lawful means.
Lin said Anthropic had shown the government’s measures were likely unlawful and arbitrary, and she found that the record supported an inference that the company was being punished for publicly criticizing the government’s contracting position. In one account of the ruling, she also said the administration’s approach looked like an attempt to “cripple Anthropic.”
Why the evidence was questioned
The core of the dispute is whether the government had enough factual basis to invoke a rarely used “supply-chain risk” designation against a domestic AI company. According to the judge, the Pentagon had not provided a legitimate basis to infer that Anthropic posed the kind of threat the statute is meant to address.
Reporting on the order says Lin concluded that the Defense Department’s justification did not support the conclusion that Anthropic might become a saboteur, and that the law does not permit the government to stretch the definition of supply-chain risk to cover a contractor that merely refuses to change its terms of use to suit the agency’s preferences. That reasoning goes to the heart of the case: the court was not persuaded that disagreement over policy or contract terms is enough to support a security-threat label.
The free-speech angle
The ruling also framed the government’s actions as a potential First Amendment retaliation case. Lin wrote that the record supported an inference that Anthropic was being punished for criticizing the government’s contracting stance in public, and that such punishment would amount to “classic illegal First Amendment retaliation.”
That framing matters because it shifts the dispute from a narrow procurement fight to a broader question about government retaliation against companies that challenge federal policy. If the designation was motivated by speech rather than security evidence, the legal problem becomes much more serious for the administration.
How the case affects Anthropic’s business
The practical stakes are high. The supply-chain risk designation would force the Pentagon and its contractors to stop using Anthropic’s commercial AI systems in defense-related work. That could cut the company off from an important federal market and damage its reputation with other government customers.
The judge’s order pauses those effects for now, but the administration was given time to appeal because the ruling is delayed for seven days. Anthropic also won relief against a broader directive that would have pushed federal agencies away from its technology altogether.
Why this case matters for AI regulation
This dispute is one of the clearest tests yet of how the government can regulate AI vendors through national-security tools. The Pentagon’s classification of a U.S. company as a supply-chain threat is unusual, and the D.C. Circuit later declined to pause the designation in a separate appeal, underscoring that the litigation is moving on multiple tracks.
The broader implication is that agencies may face tighter judicial scrutiny if they try to restrict AI providers without a strong factual record. For AI companies, the case suggests that contract disputes and policy disagreements with the government may not be enough to justify security-based penalties absent concrete evidence of risk.
What happens next
The Trump administration can still appeal the California injunction, and the underlying case will continue in court. At the same time, the government may pursue other lawful methods to reduce or end its use of Anthropic’s products if it can justify those decisions under the relevant rules.
For now, the ruling is a setback for the administration and a notable win for Anthropic, but it is not the final word. The real question now is whether the government can produce a stronger evidentiary record—or whether the courts will ultimately decide that the supply-chain risk label never belonged on a domestic AI company in the first place.
Get All The Latest Updates Delivered Straight To Your Inbox For Free!