Anthropic Won Final Judgment Against the Pentagon — and Lost Two Counts

A federal judge in the Northern District of California ended Anthropic's challenge to its Pentagon "supply chain risk" designation on 27 August, and the way it ended matters more than the headlines suggest. Three documents hit the docket the same day: Dkt. 250, a 59-page opinion on cross-motions for summary judgment; Dkt. 251, an order of final relief; and Dkt. 252, the judgment closing the case. Judge Rita F. Lin presided.

This is not the March injunction

In March the same case produced a preliminary injunction — provisional relief, carrying a seven-day stay and a $100 bond. What was entered on 27 August carries neither. It is a decision on the merits with the case file closed, which is a different legal event with different consequences for appeal timing and for what the agencies must now do.

Anthropic did not win everything

Judgment went to the government on Count III, the ultra vires and separation-of-powers claim. Anthropic also lost Count V as to HHS, Commerce, the VA, the SEC and NASA, and lost entirely as against the defendants the court grouped as non-participating — a group that includes the Executive Office of the President. The President's 27 February directive was therefore not struck down as against the President. What fell was the agencies' implementation of it, together with the designation signed by the Secretary.

What the record actually showed

The opinion is blunt about the evidence. "The record is slim," Judge Lin wrote. "A four-page memorandum, which post dates two of the three challenged actions, provides the entirety of the government's rationale." The government's stated reason was that it "cannot trust Anthropic to ensure the integrity of its models" because the company had criticised it "in an increasingly hostile manner through the press." The court found "the broad measures imposed on Anthropic were illegal and baseless" and wrote that "the empty invocation of national security is not a blank check to punish and retaliate against government critics."

What the common framing gets wrong

"Judge blocks Pentagon blacklist" describes March, not August. Three things are being lost. First, this is final judgment, not an injunction — bigger, and unstayed. Second, vacatur is not restoration: paragraph 14 says in terms that the order "does not require the Department of War to use Anthropic's products or services," and APA vacatur is remanded, so the agency may in principle redo the designation on a proper record. Third, a separate D.C. Circuit FASCSA petition, No. 26-1049, is still pending and untouched by this ruling. A buried detail cuts the other way: the opinion notes the government "is discussing collaboration with Anthropic on its new model, Mythos, in an array of sensitive contexts."