upvote
I think the better analogy is an insane nuclear power plant manager deciding it wants to buy pens to use as neutron-flux regulator rods — because after all, a pen is functionally a pencil and a pencil is made of graphite.

Then the pen manufacturer hears about this and says “Our pens are not made of graphite and are not suitable to be used in nuclear reactors”, to which the reactor owner says “it’s fine, they fit in the graphite rod holes, and we’re just using until the next generation of pens come out which will do an even better job”, and then the pen manufacturer says “I’m not going to sell you any pens until you agree that they will be used only writing.”

reply
JAVA TECHNOLOGY IS NOT FAULT TOLERANT AND IS NOT DESIGNED, MANUFACTURED, OR INTENDED FOR USE OR RESALE AS ONLINE CONTROL EQUIPMENT IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL-SAFE PERFORMANCE, SUCH AS IN THE OPERATION OF NUCLEAR FACILITIES, AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS, AIR TRAFFIC CONTROL, DIRECT LIFE SUPPORT MACHINES, OR WEAPONS SYSTEMS, IN WHICH THE FAILURE OF JAVA TECHNOLOGY COULD LEAD DIRECTLY TO DEATH, PERSONAL INJURY, OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE.
reply
The previous power plant manager had, of course, already signed a contract agreeing to those terms; the power plant is subsequently under new management and upset about being bound by this contract, so they designate that none of their suppliers of parts and fuel are allowed to have any commercial dealings with the pen manufacturer or use these pens for any purpose, even writing.
reply
And why would the manager ban the manufacturers pens even for writing, except out of spite to punish the manufacturer? And coming back to the real case, is the supply chain risk designation supposed to be a punishment or only there to actually protect the supply chain?
reply
That analogy still makes this sound like a textbook designation. In that situation the pen manufacturer is expected to sell pens without a theory of what will happen next. The person who buys a pen might use it to kill someone or commit horrific legal/moral crimes and that has nothing at all to do with the pen manufacturer.

I can see how I might reasonably refuse to deal with that pen manufacturer. The pen manufacturer is unreasonably pushy and they're going to be massive trouble to deal with because they're all up in my business in a paranoid way and disrupting my use of their product. Companies have made my never-again list for far smaller slights.

reply
Where’s my atomic bomb sold at Walmart?
reply
deleted
reply
This is the most accurate parallel as far as I can tell. I've not seen any evidence that Anthropic deliberately built automated systems or escape hatches that literally prevent the US Government from using Claude to do these things. Other than the basic AI Safety mechanisms in place for everyone/general use. It's almost the reverse, where they explicitly don't want to strip away guardrails that say things like "don't kill people".

The intent and framing matters a lot here. Refusal to remove safety features is a LOT different than deliberately building mechanisms to sabotage would-be operations.

reply
It doesn't seem like you understand what a supply chain risk designation is for.

It's to ensure that companies that the DoW relies on don't build on top of a product that isn't fit for DoW work.

You seem to be agreeing with this designation in a way. The DoW essentially said "Pen company won't let us use their pens as neutron-flux regulator rods, so anyone building power plants for us isn't allowed to use these pens as neutron-flux regulator rods".

What is the problem you have with that?

reply
They've essentially said "pen company won't let us use their pens as neutron flux regulator rods, so anyone building power plants for us isn't allowed to use these pens as pens"

(and yeah, there might be a completely legitimate reason to stop your subcontractors from using HuaweiSpyPens, but determining that ACME Pens is just as dangerous because they refused your neutron flux regulator order looks like a punitive measure, not practical risk reduction)

reply
So the DoW should have the ability to perform mass surveillance on American citizens?

Mind you, that is not the DoW’s charter. How would a restriction on that be “unfit” as you say?

The DoW is perfectly within their rights not to purchase anthropic products. That’s different than labeling them a supply chain risk.

reply
The DOW should (and does) have ability to do anything and everything that Congress has said they can do.
reply
So, for example, if Congress says the military can require the entire domestic population to be Catholic and kill anyone who isn't... ?

That's not how it works.

reply
It actually is, and this is why there are separate judicial, executive and legislative branches to put those checks and balances on each other instead.
reply
Your argument is that if Congress passes a law that says the military can summarily execute non-Catholics, the military should have the ability to do that, i.e. the courts or the public shouldn't stop them?

> Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.

> No person shall be held to answer for a capital, or otherwise infamous crime, unless on a presentment or indictment of a Grand Jury, except in cases arising in the land or naval forces, or in the militia, when in actual service in time of war or public danger; nor shall any person be subject for the same offense to be twice put in jeopardy of life or limb; nor shall be compelled in any criminal case to be a witness against himself, nor be deprived of life, liberty, or property, without due process of law; nor shall private property be taken for public use without just compensation.

Example chosen specifically for its unambiguous unconstitutionality.

reply
No, not at all. How did you get "the courts shouldn't stop them" from "that's why there's a separate judicial branch to impose the checks and balances"??? That's literally the opposite of what I said.
reply
> The DOW should (and does) have ability to do anything and everything that Congress has said they can do.

> Me: That's not how it works.

> You: It actually is

Moreover, regardless of what the courts do, the military still shouldn't execute a law like that, because they too have the ability to refuse to violate the constitution even if Congress tells them to.

reply
> I know everyone says this is political but it actually seems like a textbook designation

It literally is a textbook definition, signed into US law:

“Supply chain risk,” means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252).

To add onto what another commenter said, the pen analogy would be more like the manufacturer designing pens that stopped working when used to sign strike orders they disagreed with.

reply
Selling a pen labeled "this pen will refuse to sign certain orders" is not sabotage or malicious and is thus not a supply chain risk. The DoD is free to not buy from Anthropic, but designating them as a supply chain risk is incorrect, as well as arguably arbitrary and capricious given their public criticism of Anthropic's beliefs.
reply
The DoD buys from suppliers, who buy from suppliers, and so on. Hence supply chain. Hence supply chain risk.
reply
I don't think anyone doubts that subcontracts exist. They doubt that Anthropic's insistence that Claude isn't capable of being the operating system for an automated killbot and associated terms the DoD previously agreed to means that there's any danger to the US military from Lockheed Martin using Claude as a code assistant to build GUIs.
reply
"Supply chain risk" specifically refers to risk of malicious attack or sabotage through the supply chain, not all risks associated with supply chains.

A vendor with particularly poor QA might be a risk in your supply chain but isn't a "supply chain risk" according to this designation and neither would Anthropic be.

reply
You would think that's a surprisingly easy concept to grasp, but many are viewing this through the lens of desired outcome and not reality.
reply
Supply chain risks are usually when someone does a attack over the supply chain. Like when the mossad planted literally explosives in radio devices for Hezbollah.

Antrophic merely said they don't allow their tools to be used for autonomous killing.

A very specific case.

So where is the danger making it necessary preventing all suppliers from using Claude at all? That only concerns those who work directly on autonomous killing and only they will have to go to Altman or Musk.

So none of that is any threat to the military - so it was just black mailing to make them do the governments will - which is something usually dictatorships do, not democratic systems.

reply
supply chain risk has a standard definition that matches what you think, and a legal definition that lets the government do whatever it wants.
reply
[flagged]
reply
They thought the product was such garbage they threatened them for not letting them use it any way they wanted?
reply
Oddly when the topic of e.g. car infotainment systems comes up, like BMW locking you out of features in your own car, this place is up in arms, but when the military has a problem with it, suddenly they should be forced to accept it?
reply
I am not the military. The military has special, near infinite powers I don't have. Therefore I always support anything that corrects the balance.
reply
The pen example makes sense if the intermediary were to ship the pen as part of the final product but not if the pen is simply used to draft designs of the final product. It seems that this designation would prohibit using the pen anywhere in the process which doesn't really make sense.
reply
> so as to surveil

How does Android and iPhone meet the grade given apps have pretty consistently leaked locations, base layouts etc?

reply
apps, not the actual devices by the supplier
reply
I think that still matches "an adversary may sabotage, maliciously introduce unwanted function".

https://taskandpurpose.com/news/military-cybersecurity-ad-tr...

> The U.S. military has disabled advertising tracking tools in government-issued phones, computers and other devices, officials recently told Congress.

> The different military branches confirmed they had done so, some only this summer, following reporting that commercially available data taken from these devices and sold freely by data brokers, was being used by Iran and other adversaries to track and in some cases target American bases and personnel.

reply
Who is the adversary in this case?
reply
the courts interpret the statute, we have to read their argument where they explain why they think that's not the right definition to focus on. (the "adversary" is in section 3252, but they say that independently from that section 4713 allows determination of exigency.)

https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-104... see page 30

reply
Anthropic
reply
"risk that an adversary may" any of them.

China, Russia, Iran, come to mind.

reply
[flagged]
reply
Because those countries do not control Anthropic's products.
reply
Because it's incorrect.

Those are (arguably) adversaries but the actor here is Anthropic, which is not an adversary.

reply
That's not at all what this is. Anthropic was very clear up-front what they would and wouldn't allow. They were not going to "subvert" anything. "Degrade function" in this context means that there is a risk that ongoing changes to the covered system will cause problems for the government. That wouldn't have been the case here; it would have been clear from the start what the military would and wouldn't be allowed to do with it, and that wouldn't change.
reply
It is not the textbook definition, because what Anthropic is doing is not sabotage, malicious, or subversive. Those are the key words in the definition. They are just refusing to add a feature to the military's specification. So their bid falls short of requirements.
reply
just because someone copied one sentence from some online reference it doesn't mean that the court used it for arguing their decision.

https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-104...

> Whatever paradigmatic examples individual members of Congress may have had in mind, the statutory definition is not limited to “adversar[ies],” 10 U.S.C. § 3252(d)(4), and instead covers “any person,”

reply
You're not addressing the argument, though. No one is saying that the target must be an "adversary".

Anthropic's actions were not sabotage, malicious, or subversive. That seems to be a requirement of the definition.

reply
I tried to hint in my comment that the argument is completely different. the supply chain risk is just what the media runs with. (yes, it's in the opinion, but that is the weaker part. and the court agrees, that it basically does not apply to Anthropic.)

there's section 4713 which is roughly "Secretary of War can pull the nat.sec. card, bye"

reply
> They are just refusing to add a feature to the military's specification.

That fails to accord with the claim:

>The Department reasonably feared that Anthropic might manipulate Claude’s design to prevent it from performing national-security functions that the Department deems contractually authorized and necessary

reply
That isn't sabotage, that is simply product design. Anthropic is free to create their products that refuse to kill people, and the DoD is free not to buy those products if they don't fit their needs.

However, that's not what a supply chain risk is. It's not an order to "don't buy these products if they don't work the way we want them to", its designating Anthropic as a national security threat because they might intentionally sabotage US military operations.

reply
> they might intentionally sabotage US military operations

Yes, this is why the DoW won’t use them.

reply
The name has not been legally changed. The law still says it is the department of defense, regardless of what name they choose to use.
reply
deleted
reply
As I said elsewhere, it's utterly preposterous that the DOD actually considers this a reasonable threat, because it's simply not a reasonable possibility. There's no way Anthropic would do that, precisely because of the consequences that would follow if they did, and got found out. Moreover, they already clearly stated their terms and preferences. It's all out of the open. There's no supply chain risk, that designation is purely political.
reply
> Moreover, they already clearly stated their terms and preferences.

No it isn’t see above

reply
deleted
reply
>DoW

DoD. Gulf of Mexico. Lake Ontario.

reply
That fails only if you believe and agree with the government's argument, which I don't.

I don't think it's reasonable to fear that Anthropic would change the deal after contractually agreeing to terms of use. The government is using that as an excuse because they know that Anthropic hasn't actually met the definition of a supply-chain risk.

reply
We know who has a notorious habit of changing "deals" last minute or randomly. And that isn't Anthropic.
reply
>The Department reasonably feared that Anthropic might manipulate Claude’s design to prevent it from performing national-security functions that the Department deems contractually authorized and necessary (emphasis mine)

They didn't "reasonably" fear anything. There is absolutely no evidence to support these allegations. Anthropic has the right to impose licensing terms. Merely disagreeing with the government is not evidence of wrongdoing.

If Anthropic wasn't allowed to say what they said, how would they be allowed to object to their government's illegal use of their products at all? It sounds to me like their only choices were "shut up" or "be punished", which is a clear-cut violation of their rights.

reply
Anthropic, in the original negotiations, said the can't answer every hypothetical use case. And the DOD should just come and ask as they come up (during an operation).

Which means the exact use limitations WOULD NOT BE DELINEATED IN WRITING in advance.

reply
But that is not at all a reasonable fear. Is it really reasonable to believe that Anthropic, after receiving a government contract, would then proceed to sabotage their own product to not function as contracted? That seems like an utterly ridiculous claim to me, nothing close to "reasonable". There is no charitable way to view this designation except as political punishment and/or as a favor to Altman and Musk.
reply
> would then proceed to sabotage their own product to not function as contracted?

Claude terms here: ANTHROPIC EXPRESSLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE

Like most so-called AI, the Claude program is inherently unreliable. I doubt Anthropic would ever agree to "function as contracted".

reply
The point to me is that the contract would include the understanding that the system was not 100% reliable.
reply
The department feared Anthropic would refuse if it was used to mass surveil on Americans or kill people without human oversight. Facts already laid out in the terms. Instead of simply canceling or negotiating, they used overwhelming government force against it to apply a designation never before applied to an American company. When its an interaction between trump/trump's government and any other party, it is a good first approximation to assume Trumps side are wrong.
reply
??? What are you talking about. Anthropic isn't an adversary and they're not required to sell for purposes they don't want to. It's not sabotage and it's not malicious.

This is a designation reserved for terrorists and the link.

reply
If you're preventing the military from doing some action because you disagree with it, that makes you an adversary.

Actively handicapping a product that's otherwise capable qualifies.

reply
> If you're preventing the military from doing some action because you disagree with it, that makes you an adversary.

No, it doesn't. The military doesn't have a right to force product requirements and terms of use on companies they contract with.

If they don't like the contract terms, they can simply not sign a contract and not do business with a company. Trying to get them designated a supply-chain risk is just political retribution.

reply
>If they don't like the contract terms, they can simply not sign a contract and not do business with a company.

How is that not what they're saying here by banning it in the supply chain?

How else do you prevent any dod purchases or contracts from 'having contact' with a software you don't trust?

reply
To be credible, you need to address the point that this prevents subcontractors from using it to code.
reply
> Actively handicapping a product that's otherwise capable qualifies.

But they're not actively handicapping it. They're saying it would be wildly irresponsible to assume it's "otherwise capable".

And very critically: they have taken zero steps to "actively handicap" it in any way.

reply
Wanting veto power in execution is functionally the same as actively handicapping it, regardless of how implemented.
reply
Actively handicapping a product that's otherwise capable qualifies. If you discover that the military is using your capacitors to make rocket launchers, so you introduce a manufacturing defect that will cause them to fail at high heat, you're a supply chain risk and can be rightfully designated as such.

The converse does not qualify. If I advertise a chemical with an admixture that prevents it from being used to make explosives, the military has absolutely no right to demand that I produce a version of that chemical without the admixture. Selling a product which can't do what the DoD wants does not make me a supply chain risk, no matter how easy it would be for me to make a different product that's fit for their purpose.

reply
So... don't buy from Anthropic? How many of the US population is an adversary, according to your definition?

Say everyone had something to sell and DOD wanted to buy it. But some people wouldn't make the product changes DOD demanded. Now, they are the adversary of the DOD?

I hear Trumplandia is nice this time of year.

reply
that section is not important (the court says so, read page 30 https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-104... ) section 4713 is ("determination of exigency" regarding procurement decisions)
reply
I think you're confused. When the White House decided to stop having federal agencies buy paper straws [1], they didn't designate paper straws a supply chain risk, they just stopped buying them. The term has a very specific meaning which would not apply in the pen scenario.

[1] https://www.whitehouse.gov/presidential-actions/2025/02/endi...

reply
It's not a great analagy; it's more like a pen manufacturer not wanting their pens used to sign drone strike orders, who then only ships pens with cameras and solenoids so that the point stays retracted until the camera verifies that the paper doesn't include a drone strike orders.
reply
And that would be absolutely fine for a pen manufacturer to do. It would make them unsuitable for meeting the requirements for a government contract as a pen supplier for signing orders, but would not make them a supply-chain risk.

Same goes for Anthropic: they would only consider offering a version of their product for military use that had certain restrictions. The government is free to accept that version or reject it. Rejecting it and designating Anthropic a supply-chain risk is just political intimidation and retribution for not playing ball.

reply
i am not sure even this covers it.

it would be like the pen manufacturer who ships pens with an automatic point retractor, AND a video livestream to the manufacturer from the pen AND remote control of the point retractor.

anthropic and contractors monitor the livestream remotely to make sure the pen is not signing drone strike orders and may choose to activate the retractor.

reply
> anthropic and contractors monitor the livestream remotely to make sure the pen is not signing drone strike orders and may choose to activate the retractor.

I might be mistaken, but in the case of national security deployments the models are airgapped and Anthropic doesn't actually have access to telemetry/logging from them.

reply
You are repeatedly saying they spy on their users? Prove it. Then prove t he other ai companies don't. Then prove that the service they offered to the US government didn't have spying disabled.
reply
"You are repeatedly saying they spy on their users? Prove it."

again, anthropic is snooping, section F specifically: [https://www.anthropic.com/legal/service-specific-terms].

"Then prove the other ai companies don't."

xAI zdr is not snooping, section 3.4: [https://x.ai/legal/terms-of-service-enterprise]

openai azure zdr is not snooping: [https://learn.microsoft.com/en-us/azure/foundry/openai/conce...]

gcp zdr is not snooping: [https://docs.cloud.google.com/gemini-enterprise-agent-platfo...]

only anthropic.

"Then prove that the service they offered to the US government didn't have spying disabled."

the service they offered did have spying disabled. the security risk is from anthropic updating the claude and covertly bricking or degrading it.

quote: "In such an ongoing relationship where the vendor [...] “continuously update[s] and tune[s] the product,” the Department must establish and maintain confidence that the vendor will not add limitations that interfere with the Department’s use of the product." (p26)

"the Department relies on [petitioner] to provide regular updates to Claude" (p27)

[https://storage.courtlistener.com/recap/gov.uscourts.cadc.42...]

reply
All of these said they keep data 30 days and xai even said furthermore it can decide to keep data for even longer. You also said the version they provided to the government had spying disabled, the complaint that the govt made seems a thin excuse for what trump wanted as any and all major AI models are subject to constant updates.
reply
They're talking like Amazon Bedrock doesn't exist, which is exactly the service which provides private data and processing for models including Claude.

But also they quite clearly have no idea how classified information systems work: air gapping is step 1 of that process, and no one from Anthropic would be working on those systems without a security clearance.

reply
there is no private processing for recent claude models. there is no fable in IL5 or IL6.

bedrock IL5, nvidia, palantir and booz allen have all blocked fable.

anthropic is demanding that they rat out their customers on anything better than opus 5.

see: [thein.fo/4dekujW]

also, bedrock govcloud does both log and review customer data. specifically, they log and review customer data when it is flagged by their csam classifier.

reply
That article is locked behind subscription. These are private companies, and presumably not running the model on their own systems but are using an interface to the model hosted on Anthropics machine I would presume. So their decision to decline is different from the us govt which will have gotten special privileges.
reply
deleted
reply
> This is like a pen manufacturer not wanting their pens used to sign drone strike orders, now the military needs to have a special box of pens that don't have stipulations attached.

It's pretty common for software licenses to state that it's prohibited from being used in medical devices, life support systems, nuclear facilities, etc. Will software with those licenses also be designated supply-chain risks?

reply
Anthropic did not change the terms. Those were the terms the US Government signed. It was not secret, it was explicit identified and accepted as a term.

The analogy would be: “A customer agreed to a contract, and after running into a clause of the contract they no longer wanted to follow…canceled the contract unilaterally…which also violated the contract.”

reply
And then declared the other side a supply chain risk, claiming it is a potential vector for a national adversary to break in and cause unwanted bad things to happen unrelated to this contract.

It seems like absurdly bad faith starting at breaking the contract (over "you have to follow the law", no less!) and then to retaliate after that with trying to destroy the company's reputation and ability to do business. The boot licking going on here justifying the government operating in bad faith is both disappointing and short sighted. I didn't think the leopards would eat MY face!

reply
And then another company got the contract, claiming they got all the conditions (and more!) that the original contractor was sour about.

I don't know how anyone can look at the situation and see anything but an abuse of power. The government could have just as easily contacted with another provider. This whole thing is vindictive

reply
“the military said no and therefore doesn't want anthropic used anywhere in their supply line”

It’s clearly a punitive measure and has nothing to do with national security.

If a supplier uses Anthropic to develop a product, how does that pose a risk to the DoD or national security? The DoD can specify that a third party system can’t rely on Anthropic for DoD use without designating the company a supply risk. It was very clear that the administration was punishing the company for saying “no”.

reply
Anthropic took the position that our military’s decision making power should be subordinate to Anthropic’s constraints.

Any dependency on a company that thinks they have that moral authority and has the technical means to enforce it is absolutely a risk to the supply chain.

If you want to blame someone or something for this, we should start with Dario and “effective altruism”.

reply
> Anthropic took the position that our military’s decision making power should be subordinate to Anthropic’s constraints.

Not at all. They want their product kept out of specific decisions because it's not capable.

reply
> They want their product kept out of specific decisions because it's not capable.

Herein lies the DoW’s point. Anthropic can’t dictate how the DoW conducts business.

reply
Of course they can. Any supplier is free to set terms for how their products are to be used. The DoD is free to not agree to those terms - but it's not free to then claim the company that offered those terms is a security risk, and bar any DoD supplier from using them for any purpose - which is what the extreme measure they took represents.
reply
> but it's not free to then claim the company that offered those terms is a security risk, and bar any DoD supplier from using them for any purpose

Just because you disagree with a power of the government does not mean the government does not have that power.

reply

  > Just because you disagree with a power of the government does not mean the government does not have that power.
Sure, but we live in a democracy, not a dictatorship. The government doesn't just get to do whatever it wants. People and corporations have certain freedoms. One of those freedoms is not being compelled to work with the government. The government can't force a company to work for them except under extreme circumstances. Which currently no extreme circumstances have been claimed and no one is talking about nationalizing (the act of forcing the company to work for the government) anthropic
reply
Sure, but also just because Congress gave the government a power to take an extraordinary measure in an extraordinary circumstance doesn't mean that the government can simply claim the circumstance happens all the time and use the measure whenever it strikes the fancy of some executive.

Ultimately whether Anthropic is a true supply chain risk for the United States military is a question of fact, and the courts will have to decide. That the President or Secretary of Defense doesn't like a company doesn't make them a supply chain risk.

reply
Sure, which is why the judicial branch reviews such decisions, and has reviewed this one and has come to the conclusion that it was justified. Just because you don't like their ruling doesn't make it not binding.
reply
Their ruling is not final yet, per the article. I'm also free to disagree with the correctness and propriety of a judicial ruling and believe it was biased (of course, I do have to still abide by it, to the extent that it applies to me in any way). That it's binding doesn't mean it's right and that it is in accord with the law and/or the constitution.
reply
A judicial ruling is by definition in accord with the law or constitution (because it literally becomes the law) whether you or I like it or not, if and until such a time as it is overturned.
reply
No, I don't think that's correct. Humans are fallible, and just because a court says that something is in accord with law/constitution, doesn't mean it actually is.

That distinction is academic, of course, because when the courts decide a certain way, then of course that's how things will play out.

Well, except when the Trump admin ignores court orders.

reply
Well, that's what this court case is about. The government believes they have that power, and Anthropic and others believe they don't. You clearly believe they do, and I clearly believe they don't. It's fine to disagree. Ultimately SCOTUS may decide on this, and that'll be the final word. Not that SCOTUS is always correct in its rulings, but at the end of the day, their decision is final.
reply
> but it's not free to then claim the company that offered those terms is a security risk

Yes they are free to do that. You have to blame Congress for giving them that authority under the Federal Acquisition Supply Chain Security Act and specifically 41 U.S.C. § 4713.

But Claude’s ToS didn’t prohibit use of Claude for sensitive military operation but it was coded to do so. It was part of the government’s evidence

reply
No, they can only do that if a company is a true supply chain risk. Not everyone some idiot in the government doesn't like is a such a huge risk to the country that they can be banned from doing business with anyone doing business with the DoD.

Ultimately this is for the courts to decide, and the current decision is not final. And while the two Trump-nominated judges agreed with you, the other judge agrees with me - so at least we can say that neither my nor your position is legally absurd.

reply
I don’t use those words but I agree it’s unsettled.
reply
> Anthropic can’t dictate how the DoW conducts business.

Sure they can. The DoD is bound by terms of use and contract terms for any product from any company that they use. They don't get a special pass just because they're the military.

reply
I think you are latching onto terms that were not declared. This is covered in the Appeals court case.
reply
They're offering a service, with contractual limitations that the Pentagon agreed to.

It doesn't seem any different to me than Dominos pizza offering to deliver pizzas to the Pentagon but not to the strait of Hormuz. If that somehow makes the military subordinate to Dominos Pizza, just because Dominos is able to dictate the terms of their own delivery service, then sure, ban anyone in the military supply chain from being able to order pizzas. It would make the same amount of sense.

reply
The difference would be the DoW needing a a Tehran pizza delivery service, and thus saying "None of our pizza delivery services can use Dominos because they refuse to do the work we need".
reply
Declaring Dominos a supply chain risk means that Boeing cannot order a Dominos pizza for their board meeting in Arlington, because Boeing sells F-35s to the Pentagon, and Dominos wouldn't agree to deliver pizzas to a war zone.

Declaring Anthropic a supply chain risk means that Boeing can't use Claude to draft a poster informing people about the board meeting.

This isn't the Pentagon saying "I need pizzas to the front lines and Dominos won't do it; someone call Pizza Hut ASAP!". It's the Pentagon threatening to cut off Domino's ability to do business with a significant part of their customer base in order to compel them to deliver pizza way beyond their contractually-agreed service area.

reply
But why can’t the military just not use Anthropic? Why can’t the DoD say “ok we’re going with a different vendor”? Even if you find Anthropic’s stance distasteful, why support taking punitive action on Anthropic?
reply
I feel like in this thread no one is understanding what supply chain risk designation is. The government can just not use Anthropic, and that's exactly what they're doing, and they are not using it so much that they don't want Anthropic anywhere in their chain of supply. It's not necessarily punitive, the government is just covering their tracks so that if somewhere in their supply chain Anthropic exists, they want to remove them. They are complying with Anthropic's demands to not be used in war and the DoD says, okay, we won't use you anywhere and also enforce that we won't use you, just like you wanted.
reply
Designating Anthropic a supply-chain risk means that no one in the federal government can use Anthropic's products for anything. Outside of the military, there are tons of places where Anthropic's products are a good fit for the needs of many other federal government agencies.

The DoD is perfectly free to say "no one in the DoD can use Anthropic products because we believe their products are not fit for our needs". That would 100% solve the problem.

Designating them a supply-chain risk is just political retribution for not caving to the DoD's contract negotiation demands. That's all. It's not necessary to ensure the integrity of the US military's goals and objectives. It's just punitive, elementary school grade bullying.

reply
> They are complying with Anthropic's demands to not be used in war

There was no such demand from Anthropic. Why are you making things up?

EDIT: Honestly, the rest of your comment is even stranger. You're starting from a false premise, a strange belief about what the designation is meant for, but you do end up providing a wonderful demonstration of your opening sentence for yourself at least. You definitely don't know what you're talking about.

> It's not necessarily punitive, the government is just covering their tracks so that if somewhere in their supply chain Anthropic exists, they want to remove them.

This reminds me of an old comment here where some idiot claimed that suicide is illegal so police are allowed to stop people from killing themselves. No, if Anthropic doesn't want their systems involved in war (that's a thing you made up, again, just to be clear) then they do not need to be designated a supply chain risk to "protect them" or whatever drivel you come up with next.

The correct response from the DOD would be to terminate contracts with Anthropic, and that's it. Then Anthropic would be responsible for ensuring that any contracts with other parties keep them out of war (again, not a thing they said they want, just your fiction). This is how it works for all other software systems where people don't want their work involved in wars or used by the police or whatever.

Designating them a supply chain risk was punitive. Only fools think otherwise.

> I feel like in this thread no one is understanding what supply chain risk designation is.

I wouldn't say "no one" understands, but you certainly don't.

reply
Again with the lack of understanding why it matters. The DoD does not want Anthropic anywhere near any system they'd use! Because it's, well, a risk to their supply chain if Anthropic were to somehow find out and then e.g. crash a rocket if the DoD was using a third party rocket provider that used Anthropic models. This is the correct response by the DoD, they simply do not want Anthropic in their supply chain. The DoD don't care what Anthropic comes up as reasoning, they want to maintain control of their systems without any (even potential) meddling.
reply
And thus, every supplier of the DoD is prohibited from asking Claude to tweak the CSS on their website.
reply
Indeed, probably for the best, even. You don't know what systems Claude will have changed in the code especially as these days people aren't even reading the code and Anthropic has a history of trying to sabotage others' code such as during the Fable release debacle where they outright said they'd do so if you're working on frontier AI for example. I wouldn't let any sort of company like that anywhere near critical systems.
reply
The point is: using Claude to design a website, do accounting, run a marketing campaign, is not a supply chain risk for the DoD, but taken literally and given the scale of the DoD "no DoD supplier can use Claude for anything" clearly is punitive.
reply
It is, because the DoD doesn't know what the contractor is doing with Claude, or what Claude is doing itself. Like I said Anthropic could just as maliciously sabotage if they detect they're being in autonomous systems, why do people seem to believe they couldn't?
reply
The DoD can require contractors not use Claude to do whatever they're being contracted to do.

It doesn't need to say if you do any business with Anthropic (for other customers, internal tools or processes), you lose all your contracts with us.

reply
You failed to address my initial question.

Why did you make up false claims about Anthropic not wanting their systems to be used for war? They're clearly fine with it, but they wanted human-in-the-loop on decision making. They never asked to not have their systems used for war.

> Again with the lack of understanding why it matters.

It's cool that you were able to open this with at least one sentence containing some useful wisdom. A lack of understanding does, in fact, matter.

> The DoD does not want Anthropic anywhere near any system they'd use!

Nah, the DOD is punishing Anthropic for not agreeing to change the terms of the contract and allow them to use Anthropic's systems to determine, without a human-in-the-loop, who to kill or what to target and to use their systems for mass surveillance.

> Because it's, well, a risk to their supply chain if Anthropic were to somehow find out and then e.g. crash a rocket if the DoD was using a third party rocket provider that used Anthropic models.

What the fuck man. You went from (in your first comment) the DOD is helping Anthropic out by designating them a supply chain risk because it'll keep them out of war (again, a fiction, that isn't what the dispute was over), to now the DOD is worried that Anthropic might throw a tantrum and start crashing rockets if they find out.

Again, Anthropic does not mind their systems being used for war. They sold their systems to be used for war. They have specific, already existing (not changed later) contractual statements about how they can be used for war. That's it. That's the fucking dispute.

> This is the correct response by the DoD, they simply do not want Anthropic in their supply chain.

No. Just like Anthropic wanted (or were fine with) their systems being used to conduct war, the DOD actually does want Anthropic's systems in their supply chain. But they want it without restrictions. Stop making shit up.

> The DoD don't care what Anthropic comes up as reasoning, they want to maintain control of their systems without any (even potential) meddling.

Now this is a true sentence. The DOD does not care as long as they can access the systems without restrictions. I can't believe you wrote that sentence and the one before, though. They are entirely incompatible. It cannot be the case that DOD does not want Anthropic in their supply chain and that they do want it in their supply chain.

reply
People who quote every sentence as if they feel the need to reply to each one instead of the overall point are quite annoying to talk to, just to let you know for the future.

> Why did you make up false claims about Anthropic not wanting their systems to be used for war? They're clearly fine with it, but they wanted human-in-the-loop on decision making. They never asked to not have their systems used for war.

That's what I meant, as I left out the "human in the loop" part as that was well understood in the context of the argument, but perhaps not. Anthropic does not want to be used in autonomous systems and thus the DoD agrees that they will not be, in their own supply chain. This is was all quite clear from my point but you felt the need to quote every single sentence and then ask the same question each time because you were starting from a faulty supposition, just wasting your time and mine.

reply
> People who quote every sentence as if they feel the need to reply to each one instead of the overall point are quite annoying to talk to, just to let you know for the future.

There are a lot of twits on this site (and to your credit, so far you don't seem to be one of them) who will edit their comments so that replies like mine (if I had left out the quotes) turn into non sequiturs, or worse appear unhinged and detached from anything going on in the discussion. Again, to your credit you have not yet edited your original comments. But I have learned to not trust even long time commenters on this site. Even some very high karma commenters will behave like that.

If it annoys you, then that's fine. I'm not terribly bothered.

> That's what I meant

But that's not what you wrote. You wrote:

>>> They are complying with Anthropic's demands to not be used in war

If you had meant what I wrote, then you couldn't have gotten much further away from it with your original comment. You wrote too broadly about what Anthropic wanted and created a fiction instead. You shouldn't be surprised to be called out for it when you do something like that.

> because you were starting from a faulty supposition

No, I started with your words. If you wanted me to start with something else, I could have, like you, imagined other words to reply to. But I chose to reply to what you wrote, not what you apparently want people to imagine you wrote.

(Hey! I didn't quote every sentence, is this less annoying for you?)

reply
It's going to make things complicated w.r.t. software used anywhere within and by the DoD:

1. the linux kernel has patches created by and security vulnerabilities identified by Claude/Anthropic;

2. same with other software like SQLite and rsync.

reply
Humans are 100% in the loop with software patches and there are many people in the chain so that provenance is maintained. It’s not that Claude could never look at the source code
reply
Correct, anthropic's requirement was human-in-the-loop.

The DoD's response was to ban anthropic from all DoD facing activity and supply chains, whether or not there is a human in the loop. This does in fact run into exactly GP's issue. (or as I suggest elsewhere, can Boeing use Claude Code for software development?)

reply
It’s hardly “self defining” as the Appeals Court noted because military operations can involve different degrees of human involvement in targeting decisions. It’s not as binary as people have been trying to portray it.

[1] https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-104...

reply
Find me what degrees of human involvement bombed the girls school.
reply
Humans make mistakes too.
reply
Perhaps Anthropic was right in needing more oversight in using AI for murder
reply
Maybe. That statement is doing a lot of heavy lifting. It’s a different argument than saying Anthropic’s restriction would have prevented it (it was based on bad intel/old military installation)
reply
Anthropic said "we don't want to be used as part of kill chain decision-making" (actually it may have been even more specifically autonomous/unmanned kill chain decision making)

The DoD responded not by saying "alright, we will use OpenAI for our kill-chain uses" but by saying "Boeing is no longer allowed to use Claude Code".

reply
Correct, they do not want “Boeing” to use Claude models to write software for airplanes for example
reply
Yes, and this is not (and cannot be!) a supply chain risk in any reasonable interpretation.
reply
It is though. Read the opinion here: https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-104...

It’s a risk that persons may otherwise manipulate the operation of a covered technology to deny or disrupt its function. The statute allows the DoW to do this.

reply
If the DoD uses some Boeing plane, they do not want Anthropic to be able to interfere somehow.
reply
And my point is that using Claude models for coding a Boeing plane does not allow anthropic to interfere in the operation of those planes. Once the code is written, anthropic has not plausible form of control.

Thus, it cannot be a supply chain risk.

reply
It is if the auto generated code for say safety critical or mission critical code generated by a LLM or even someone tries to put LLM in the decision loop and it refuses to do an action.
reply
No. They can do that with an order covering the specific parameters under which they care about it. Supply chain risk definition is about adversaries and sabotage, not companies dictating contract terms.
reply
They don't want Anthropic to be able to sabotage any operations the DoD has. Anthropic already has a history of trying to sabotage others like during the Fable release when they said they'd subtly wreck your code if you were working on cutting edge AI.
reply
> Why can’t the DoD say “ok we’re going with a different vendor”?

That's exactly what they're doing. It turns out the DoD is a really big bureaucracy and has process to make sure they thoroughly exclude a vendor and transitive dependencies on that same vendor.

reply
They do, but this is not it. This is designating Anthropic as an adversary of the USA, and it is forbidding anyone who wants to sell to the DoD from using Anthropic products for anything. This is a massive attack on free speech, free enterprise, and the market.
reply
Supply chain risk is a technical definition not a vibes based one.

And companies absolutely have the right to dictate terms. The idea that the DoD has the unilateral authority to do whatever it wants is literal textbook fascism. It's never been the law in the US and it should not be now.

reply
If the DoD doesn't want Anthropic anywhere in their supply chain, because Anthropic said they won't supply the services the DoD needs.. why can't the DoD bar them from being in their supply chain?

Seems very straight forward.

reply
That's not normal in a free country - even less so in one that claims to have a free market.

Anthropic said "don't use our products for targetting decisions in military ops". The DoD could have easily said "actually then, we won't use your products at all". Instead, the DoD said "either you let us use your products in targeting decisions, or we won't let you sell to anyone who sells to us for any purpose, using a law that only applies to adversaries of the USA".

reply
> This is like a pen manufacturer not wanting their pens used to sign drone strike order

I am pretty receptive to the "guns don't kill people, people kill people" argument, but we are taking a big leap from pen to llms/artificial intelligence. I am sympathetic to some of your other points, but I simply must reject this analogy.

reply
"the government wants to use our tool to murder people", and declaring that company that says "no" into a "supply chain risk" is absolutely retaliatory and an attempt by the government to influence the behavior of the company.

The moral and ethical scale of the issue makes this far different than someone buying a pen.

reply
> "the government wants to use our tool to murder people", and declaring that company that says "no" into a "supply chain risk" is absolutely retaliatory and an attempt by the government to influence the behavior of the company.

If Lockheed could brick its planes if the US planned to use them for military action it disagreed with (and showed some indication they couldn't be trusted not to do it), would they be a supply chain risk?

It is not the role of a defense contractors to have oversight and control power over the military they're supplying.

reply
The military could just use different AI models for the purposes Anthropic does not want its models used for.

Purposes Anthropic already spelled out in contract form.

reply
Correct so what’s wrong with that? Plenty of open weight models to use
reply
Ridiculous hypothetical for analogy purposes, but, imagine if Anthropic had developed a new type of rifle that the military was considering using, which had a black-box AI system that could prevent the trigger being pulled when aimed at certain targets. The military says, ok that's cool, as long as we can be in control of that decision-making process. Anthropic says, no, we know better than you and better than the law what kind of targets should and should not be shot with our rifles. The military would then respond “lol, lmao even” and then deem them to be a supply chain risk and adopt another rifle instead.
reply
Or they could just not buy the product in the first place. The supply chain risk part is pure retribution.
reply
Supply chain risk ensures nobody in the chain is buying it and thus becoming subject to Antropic's demand of usage control. They are still free to use it for non-DOD purposes, but if Antropic wants control over DOD, DOD has the right to say "no, we won't have anything to do with you, and thus you're not getting any control over us". I agree it may be unpleasant for Antropic but DOD has the right - I'd say even responsibility - to not submit to control by any private party.
reply
That’s literally what they’re doing. That’s what supply chain risk means.

They don’t buy the product, and the product can’t be used in the things they do buy.

reply
No, it's not. If Anthropic is a supply chain risk, that means that if you are working on a project that will be used for the DoD, you can't use Claude or any other Anthropic product for any purpose whatsoever in that project. Asked Claude to change the color of a PPTX for a sprint demo you're doing? Oops, you've know introduced a supply chain risk and your company is liable for damages or at least losing its entire contract with the DoD.
reply
No, they would simply not buy it.
reply
That’s not even the end of the story. Anthropic has sued. They really want to sell their rifles to the government and retain control.
reply
You’re just describing the exact situation we’re in but substituting a drone for a rifle. If the government is mad they should just partner with a contractor who is less concerned about this, which lo-and-behold they did it’s a company called OpenAI.

Anthropic isn’t a supply chain risk since they easy found someone else

reply
No, the DOD has super specific acquisition rulesets that don't apply outside the DOD umbrella. Limiting acquisition or refusing sales can be done without being flagged a risk. FedRAMP levels accomplish this without the political intrigue and the unnecessary defense of this action not being political.

In other words: the same outcome could easily be accomplished without being punitive to Anthropic.

reply
Non-sense. Pentagon has many many uses of AI besides autonomous weapons and mass domestic surveillance, which Anthropic doesn't restrict. ie: intelligence analysis, target selection, payroll, inventory, research, supply chain and logistics, medical, bureaucracy, ...
reply
We cannot subordinate our military’s decision making power — in any arena — to a private company.

Our military must also not be dependent on a private company that believes it has the moral prerogative to control our military’s decisions, and would have the technical capability to do so.

reply
Maybe the military should just seize the technology and nationalize the company then? Because clearly, paying a private party voluntarily entering into a contract on mutually-agreed upon terms is now a polite fiction that can be done away with.
reply
The military is bound by contract, just like any other government agency. They entered into a contract, with these clauses well-known. This was OK because they have all the same problems every other organization uses AI for.

They could’ve just negotiate a new contract with OpenAI, without banning it from every government agency. But I’m sure that would’ve triggered some kind of extra clause and cost money…

Your entire statement lacks any type of fact.

reply
This is ridiculous. Anthropic should be free to say the terms for using their service. It doesn't "subordinate" the military, and the military is far from some infallible, unquestionable force here.

If the military wants to use AI to autonomously kill people, they can - Anthropic is not stopping them - thy just can't with Anthropic's services.

The government retaliating by then claiming that any use of Anthropic is risk is an obvious farce. How would Anthropic be any less of a risk if they let Claude autonomously kill people?

reply
No entity should have a right to dictate whether your private company does business with someone or not. The military can pound sand if they don't like your contract terms. That is if you believe in democracy and capitalism. If you don't, then it's not a problem to you.
reply
Any private entity has that right though.

I, as a person, can decide I won't do business with a company that uses Anthropic models for whatever reason. I can even decide I won't do business with a company that relies on suppliers that use Anthropic.

This right applies to private companies too. Like Walmart could set contract terms that their suppliers aren't allowed to use AWS. The suppliers are free to accept those terms or not.

reply
You’re still absolutely free to do business with Anthropic.

Our military is simply choosing not to do business with them, or anyone that depends on them.

If you believed in democracy, you wouldn’t be supporting the EA-infected corporation that tried to make our democratic institutions subordinate to their corporate decision making.

reply
That is not what they are doing. They could have just canceled the contract and paid the exit clause. This is retaliation, because Anthropic would not move on their pre-negotiated terms. As a result, they are now been from being used anywhere in the US government.

Let me ask you this, if Anthropic did allow them to use it for surveillance… do you think it would stop at the Pentagon?

reply
I support any and all moves that empower private persons and corporations over the infinite force of governments. They didn't try to make anyone subordinate to anything. They made a proposal. Trump pissed and generally made a mess as he usually does and then they randomly declared them a supply chain treat.
reply
Right but the military wants to be able to use a tool they are paying for in all cases, not just ones the manufacturer thinks they should.

If I sold steel to the Pentagon but then tried to say they they couldn't use it for ships and tanks but they are free to use for warehouses they would react the same way as they are doing now.

Edit add: What is targeting? What is surveillance?

If someone in the intelligence analysis department uses AI to generate a report, then someone else uses that report for targeting did they just break the terms? Where is that line?

Much easier for the Pentagon to say no.

reply
Your "but then" is off-base. This is selling steel for the express purpose of nuclear reactors, with a contractual clause against its use in tanks, and the US government deciding that it doesn't feel like abiding by the rules in the contract.
reply
> If I sold steel to the Pentagon but then tried to say they they couldn't use it for ships and tanks but they are free to use for warehouses they would react the same way as they are doing now.

They sure as hell shouldn't! Selling steel for any use except ships and tanks is a little odd but it's not a risk.

(I'm ignoring the "but then" because this was about future sales not previous ones.)

reply
Wouldn't that make any product with a licensing agreement a supply chain risk?
reply
No, of course not, because life isn't black and white. Just those with licensing agreements that conflict with the militaries mission, where the product could be manipulated to hinder the mission. Most manufacturers would jump at the chance to rewrite their licensing agreements specifically for the military just to get a government contract.
reply
This was not manipulated to hinder the mission. Every account of this indicates it was clearly spelled out. They could not use it for mass surveillance or for targeting. The lawyers at the DOD did not miss this. They agreed to the terms, because they had no intent to use it for such purpose purposes.

This is like the change order from hell.

Nothing was stopping the DOD from just entering into a new contract with OpenAI…

reply
But if they don’t jump at the chance to retroactively rewrite the already-signed license, you’re OK with designating them a supply-chain risk?

That’s going to make it rather risky for anyone to sign licenses with the DoD. In fact, it renders the licenses pointless since you just have to do anything the licensee says.

reply
I mean typically the outcome of civil suits is black and white (at least on a per-claim basis).

So Amazon and Microsoft don't enforce cloud licensing agreements with the USG? If the government wants to add 3,000 Windows users to support their mission Microsoft is shit out of luck in getting paid for them?

reply
> Anthropic wanted to have rules on how the military used AI

No, they want to have rules on how the military used Anthropic AI.

Military would still be free to use OpenAI for the nasty stuff

reply
Yes, in fact the military has a system in place to make sure that they only that they only use alternate suppliers and on Anthropic AI, They do this by placing a designation on Anthropic AI that it is a risk to the supply chain, which forces purchasers to use other suppliers.
reply
I don't think this is how preferred suppliers have typically worked through the supply chain risk considering the US has definitely had preferred suppliers before and has not historically used this against a US company that was not on the list and the power of such a designation extends far past the military into all parts of the government. I'm pretty sure this has more traditionally been relegated to simple requirements or specifications.
reply
i think this is more like the pen maker doesnt want the military top brass calling their pen sales guy to make the kill/no kill decisions while using the pen to sign drone strike orders.

similarly the pen owner doesnt want to make a variation where the pen also doubles as a knife

reply
The reason it appears corrupt is that OpenAI has the exact same restrictions (https://openai.com/index/our-agreement-with-the-department-o...) but was not declared a supply chain risk. If two vendors have the same restrictions and they only designate one, then the designation must be arbitrary and/or capricious.

Edit: I was wrong, the statement I linked is extremely dishonest and I was misled. The contract language lower down makes it clear that there are no "red lines", and OpenAI products can in fact be used for mass domestic surveillance, autonomous weapons, and social credit systems as long as they are considered legal.

reply
>OpenAI has the exact same restrictions

No it doesn't. Specifically OpenAI had a "all lawful purposes" clause (which plausibly includes the existing mass surveillance apparatus), but Anthropic did not.

reply
You're right, what an incredibly dishonest statement. The actual contract language in there makes it clear that there are no restrictions. My bad.
reply
I thought the difference is that clearly written rules or SLAs are acceptable and can even be negotiated before signing a contract, but having a person, in this case Amodei himself, manually approve DOJ's usage case by case with his own moral judgement after a contract is signed is not okay.
reply
No one wanted case-by-case veto ability at Anthropic. The red lines were made clear ahead of time: No use of Anthropic models for autonomous weapons (Skynet) or mass-domestic surveillance, negotiated in the agreement.

OpenAI, xAI, and Google happily agreed to DoW contracts which allow both of those use cases.

reply
Do you think OpenAI's terms for the DoD are published on a website? Pretty sure when Anthropic got zapped, OpenAI sent DoD a memo 500ms later saying they wouldn't restrict use.

Look at it pragmatically. What does the DoD use every single procurement for? Hint: military use.

reply
Were they the same restrictions though?

OpenAI just said no surveillance of U.S. persons.

Anthropic could have gone further; I think it's likely they did.

reply
There are three restrictions:

> No use of OpenAI technology for mass domestic surveillance.

> No use of OpenAI technology to direct autonomous weapons systems.

> No use of OpenAI technology for high-stakes automated decisions (e.g. systems such as “social credit”).

These are stronger than Anthropic's restrictions (https://www.anthropic.com/news/statement-department-of-war), as OpenAI says themselves: "We think our agreement has more guardrails than any previous agreement for classified AI deployments, including Anthropic’s. [...] Based on what we know, we believe our contract provides better guarantees and more responsible safeguards than earlier agreements, including Anthropic’s original contract."

Edit: I was wrong, see my original comment. Sorry.

reply
The article only cites language for surveillance.

The other stuff...there's zero citations or quotes. Meaning that OpenAI could be having their cake and eating it too, winning a public victory, with no validation on the actual language, consequences, or enforcement.

reply
I think this was discussed ad nauseum last time so I am wondering if somehow this has changed but the biggest part of the issue last time was the retaliation. You seem to suggest that this was due to the government not wanting restrictions on their actions. I feel this severely downplays how unusual this designation is considering, like Anthropic says, this has not been applied to domestic companies.

Why couldn't excluding Anthropic be done a different mechanism than a supply chain risk. Why wouldn't this be a standard part of an agreement or a request and simply refuse to renew or cancel a contract rather than being designated a supply chain risk. If some third party contractor for an unrelated non military reason wanted to use Claude as part of their process, it seems perfectly allowable.

If this was a remotely standard way of operation, why did a fair amount of corporate America sign briefs concerned with the retaliatory aspect.

Parts of the action seemed wholly retaliatory as well since Pentagon officials certainly used it as a threat. Why can't a US company have views contrary to the policies of the US government? Certainly the US government is free to not do business with them, but this designation affects everybody doing any kind of indirect business with the US government which is a rather long chain. If this becomes a legitimate mechanism, how might we distinguish caring about a secure supply chain and simply wiping out a company that disagreed with a pro war attitude? If a machining shop had a policy against manufacturing weapons at all, could they be blocked from making server racks for Microsoft or perhaps light fixtures for the Department of Labor? There are plenty of areas that are, again, non military? I don't think it's credible to claim that Anthropic will deliberately sabotage operations.

reply
>Anthropic opposing the US government

Is it not possible that this would change the risk profile of depending on them. It makes sense to work with people who support you than oppose you for things which are critical.

reply
- Having principles and sticking to them is not opposing.

- Just because you don't do everything someone wants you to do does not make you a supply chain risk.

reply
My point is did everyone know all of those principals and how committed Anthropic was to them from the beginning or did new information come in and now they need to adjust. Just because something is a term in a contract that doesn't mean it's necessarily strongly held belief that will never change.
reply
So you renegotiate the contract. You don't get to retaliate.

Only it turns out that with sufficient corruption, you do.

reply
Who runs the government changes every 2 to 4 years… are you suggesting we completely swap every vendor in the US government to align with whatever political party is in office?

There’s nothing indicating Anthropic was not keeping their end of the contract. If they had, there would have been other recourse.

reply
>are you suggesting we completely swap every vendor

I think American companies should be supporting the government as much as possible. Even when it switches.

>There’s nothing indicating Anthropic was not keeping their end of the contract.

Which is why we are talking about risk and not breach of contract.

reply
A much closer analogy than the pen one is a SAAS company having an EULA. As annoying as EULAs are I don’t think it counts as being malicious or subversive if you are very open and clear with your prospective customers what that EULA contains?
reply
I didn't understand what you said or your analogy, sorry maybe I'm stupid. Would you be able to explain this differently? Maybe something implied was omitted and I didn't follow that.
reply
It's not you, the analogy they used was wrong, idiotic, and unnecessary.
reply
It can be a textbook designation and a capricious punishment at the same time. It's almost comical, to suggest that anything about this decision was reasonable. Makes me long for the days of n-gate.com.
reply
This would be like Boeing refusing to let the DoD fly a military 737 at over 800MPH, and they designate them a supply chain risk because they really really want to make the plane go past 800MPH.
reply
It would be pretty surprising to allow a private company to control the military's use in realtime.
reply
Nothing can stand in the way of America's forever wars, genocide, and automated killing, including performative objections by a prominent tech company.

I suppose we're supposed to be satisfied that the letter of the law supports this steamroller? Because that's what matters?

The legal apparatus is one of the tools the death machine uses to get what it wants.

reply
Being on the offensive cyber security whitelist for Mythos doesn't stop you from getting constant rejections. I don't know how you screw up something as simple as a whitelist.
reply
You could use the same logic to defend the military declaring that Anthropic is full of pedophiles and therefore they cannot use their products as it would be contributing to pedophilia.

Anthropic offered a contract, with certain conditions, as do all contracts everywhere; that's their purpose. The military did not want to agree to those conditions. If they had stopped there, and refused to sign the contract, all would be good. (It's actually worse, they did sign such a contract, and then decided they wanted the contract to say something different than it actually did. "Pray I don't alter it any further.")

> >The Department reasonably feared that Anthropic might manipulate Claude’s design to prevent it from performing national-security functions that the Department deems contractually authorized [emphasis mine]

That is speculation, and you can't call it a "textbook designation" without discussing whether there's a basis for that "reasonable fear". Again, that argument also works for declaring you have a reasonable fear that giving money to Anthropic will support pedophilia. We do not know the specifics, but I at least have heard of zero evidence that Anthropic would sabotage something they signed a legal contract for, and yet I have an abundance of evidence that this administration will use whatever contortions are necessary to pressure and punish those who interfere with it getting what it wants. It all hinges on the word "reasonable", and based on the evidence that is public, this specific fear seems more ridiculous than reasonable to me.

If the government somehow had a way to force Anthropic to sign a contract that it did not want to sign, then this fear might become more reasonable. The twist is that this supply chain risk designation is exactly that. If Anthropic now capitulated, the accusation of supply chain risk (eg from Anthropic employees acting alone) would be justified. So the only way Anthropic can reasonably be considered a supply chain risk is because it is accused of being a supply chain risk.

This is a textbook example, yes, but it's a textbook example of corruption and judicial capture.

> Though they'd probably put the DoD on the cybersecurity whitelist today, the very idea of the claude whitelists for certain functionality already exists and is being used by them today.

And if they signed a contract permitting fully autonomous killbots, then using the whitelist mechanism would be a contract violation. I have some degree of faith that we'd know if such a contract were signed, because half the staff would quit. (As opposed to half the Google staff quitting after signing such a contract, which has been proven to be an incorrect expectation -- such a contract was signed, and I've heard of exactly one person quitting over it. There may be more, I don't know.)

reply
deleted
reply
I don't get it, did the US government and military stop using Claude? I thought they were using it to choose objectives to bomb?
reply
To your first question, yes. To your second question, no. They used Grok for that, and it picked out a school to target.
reply
> but it actually seems like a textbook designation

How can it be a textbook designation when designating a US company as a supply chain risk is unprecedented? So many actions under the Trump administration are unprecedented it starts to feel like the norm.

No other administration (Republican or Democrat) would do this. The DoD didn’t have a problem using Anthropic’s models during the raid on Venezuela and early on in the war with Iran.

Anthropic says to the former Fox News host it doesn’t want its models used for domestic surveillance or in kill situations without a human in the loop; all of a sudden they're a supply chain risk?

Seems obviously political.

reply
>Anthropic says to the former Fox News host it doesn’t want its models used for domestic surveillance...

Lol, do as we say not as we do!

>In addition to monitoring activists in the vicinity of Anthropic executives and keeping tabs on protests near physical Anthropic assets, the firm is also implementing a “pre-crime” approach, attempting to predict incidents before they happen.

https://prospect.org/2026/09/09/anthropic-artificial-intelli...

reply
except it's also stipulating that the paper supplier upon which the orders are signed also cant use anthropic. or the table maker. even though the AI helping make sleeker paper and tables has nothing to do with deciding what to bomb (analogy breaking down lol)

and trump admin originally went WAY further.

they originally said the pen, paper, table etc suppliers cant use anthropic even for products and subsidiaries that have nothing to do with their govt work; far beyond the supply chain of the pen (bomb). Mega Corp Pepsi Co Taco Bell Inc. LLC -> Staples > Pen Co. Sure pen co might be reasonabale. But telling taco bell they cant have claude help expand the baja-blast-radius is way too far. that would be just like secondary sanctions.

iirc there are 2 court cases. one ruled the original order was too broad and i think that still stands? so at least it's narrowed slightly to just the immediate supply chain?

but ianal

reply
> The Department reasonably feared that Anthropic might manipulate Claude’s design to prevent it from performing national-security functions that the Department deems contractually authorized and necessary

I.e. Anthrophic cannot be trusted to honour a contract.

Who'd have guessed?

reply
In almost any case I am inclined to trust entity not trump or trumps government. So is true in this case, where they pissed their pants at anthropic simply making a proposal and decided to use overwhelming government force against it. I will leave you to decide who you consider more trustworthy, Trump or Anthropic.
reply
Using Claude for working on the refrigerators at the commissary is not a supply chain risk. You're just making stuff up.
reply
Anthropic's red lines were 'no fully autonomous AI kill chains' and 'no domestic mass surveillance'. Those are clearly not national-security or DoD functions in the first place, so why would they be in any way objectionable?
reply
Do you think a private company should be able to accumulate enough wealth and power to dictate policy to the US federal government?
reply
I think a private company of any size should be able to offer its products on whatever terms they choose. If the military doesn't like those terms, they're free to do business elsewhere.
reply
Isn't that what happened?
reply
You are obviously being disingenuous, because you are on a thread where the DoD is not just electing not to buy Anthropic's service, but also trying to bully them into submission with the unrealistic threat of the DPA, punitively and disproportionately trying to label them a national security risk, and invoking supply chain issues normally applied to our worst adversaries, for the first time putting an obviously patriotic American country on the same footing as North Korea, Iran, China and Russia.

Remember, the Anthropic red line was "no war crimes and no mass surveillance of the US population." You may think that war crimes are cool, and that mass surveillance of the US population by the department of defense would be fine, but consider the natural consequences, both for democracy and for any adversary's conduct in future wars.

reply
> You may think that war crimes are cool

It's really rich to say this after calling me disingenuous.

I don't think it's cool that Anthropic gets to set military policy. I don't care how much I agree or disagree with the policy. Wario is not the president. And Anthropic does not strike me as "obviously patriotic," not that I think it's better if the private company bossing the military around is patriotic. It has no relevance.

"Warcrimes" is the new "racist," too. It gets thrown around willy nilly about every military action.

reply
War crimes have a precise legal meaning and have for a long time. Get off of twitter and touch grass if you feel you're getting called racist too often.
reply
>obviously patriotic American country

Hi, just informing you of the typo.

reply
thanks. Company, of course
reply
You mean like pharmaceutical companies refusing to supply chemicals for lethal injection?
reply
There are already several private companies that have this, eg. Apple has specific exemptions from tariffs on smartphones, computers, and semiconductors that they got by paying off Trump and promising to make their iPhone glass in Kentucky:

https://thedailyeconomy.org/article/tariff-exemptions-are-bi...

https://www.warren.senate.gov/wp-content/uploads/media/doc/l...

The correct mental model for the U.S. federal government right now is not an omnipotent democratic overseer for economic activity, but rather as just one firm that negotiates directly with other major firms for legitimization and legal protection. Their power is likely to decline further, as is the value of "legitimization", as technological developments erode the military's monopoly on physical force. Interesting times ahead - historically tech transitions like this lead to a splintering of state legitimacy and then a reorganization under new forms of governance.

reply
Somebody clearly has to
reply
Its not dictating policy. Any company of any size should be able to set any contract they want with the government or any other party.
reply
i agree. by nature a lease is more risky than the military having its own model.

however anthropic also believes it is some kind of entity unto itself so it is not at all reliable.

reply
Antropic: "We don't want our AIs to be used by the Army to do yucky Army things!"

Army: "OK, we will make sure not to use your AIs"

Antropic: "How dare you! We are suing! We intended for you to keep using it but do only what we want!"

Army: "..."

reply
They didn't want their tech to be used to, I don't know, blow up a school with 120 children. But did want to allow other kinds of usage. Is that so weird?
reply
Get rid of your high horse. Nobody wants to blow up a school with 120 children. The question is who is in control and making the decisions. Antropic wanted to be in control and make the decisions for the DOD. DOD refused. It's not so weird at all.
reply
They weren't against military use of their AI. They were against using it to kill American citizens without oversight or mass surveil Americans.
reply
> They were against using it to kill American citizens

No, they were against using it to kill people without oversight. I hope nobody thinks that there's a difference between murdering American citizens and murdering people.

reply
Oh okay, makes their position even more moral then.
reply
...I suggest you read about what actually happened:

Anthropic: "We'll sell you access to our AI as long as you don't use it for war crimes or mass surveillance."

DoD: "Ok, deal."

...time passes...

DoD: "Wait, no, we want to be able to use it for war crimes too."

Anthropic: "Too late, you agreed already, and we won't sign a contract for that. You can keep using it for everything we agreed to."

DoD: "Change the terms or we will destroy your business."

Anthropic: "No."

DoD then signs contracts with OpenAI and Google that permit them to commit war crimes and mass surveillance as long as they get legal cover, and proceeds to apply as much leverage as it can to destroy Anthropic's business.

----

And for the record, Anthropic agreed to all "yucky Army things" usage that was an extension of past yucky Army things, they just did not agree to a new class of yucky Army things: namely, fully autonomous killbots. Even there, it was only "not yet, it's not ready". Your whole comment is a gross mischaracterization.

I quit using ChatGPT entirely over this incident, and that's not because I find Anthropic's position to be saintly. They agreed to a contract where the DoD could and in practice is using their AI for committing war crimes.

reply
[delayed]
reply
> textbook designation.

Hardly. I invite you to [read the opinion][1], particularly the great pains the majority spends on wrangling the definition of the word "manipulate."

Basically, [FASCSA][2] says to denote a company is a "supply chain risk," the govt has to meet the law's rigorous definition of what a "significant" risk actually is. That definition contains a catch-all "or otherwise manipulate the function" of the thing at hand (in this case, Claude) at the very end.

The govt's whole argument is "Well Anthropic has admitted that it can technically "manipulate" the response, therefore its a significant risk, therefore we designate it as such."

The dissent gives an analogy:

> A library might post a sign saying, “Do not shout, loudly talk on the phone, play music, or otherwise disturb others.” The common understanding would be that the rule bans bringing a boom-box into the reading room with the volume turned on high but not listening to music with headphones set at a modest sound level—even though both constitute “playing music.”

It is as if the govt argued "ah ah, Anthropic played music on their headphones, they broke the rules! We therefore have the authority to ban them" and the majority insanely agrees. It is clear to anyone with basic reading comprehension that the "manipulate" clause is supposed to continue the idea of malicious or subversive manipulation that the whole section entails. The hand-waving the majority uses gives the whole game away.

[1]: https://www.politico.com/f/?id=000001a0-d91e-d276-aff6-f97f3...

[2]: https://en.wikipedia.org/wiki/SECURE_Technology_Act

reply