Anthropic doesn't provide model w/o guardrails, suppliers have to use public version, newer model releases surely know about Anthropic standoff with the military.. how to prevent model from realizing that it's doing something for the military (supplier) and sandbagging and/or subtly sabotaging the results?

=====

DOD recommends sandbagging as defense mechanism against destination "attacks":

https://media.defense.gov/2026/Sep/08/2003992823/-1/-1/1/CSA...

Page 13

  When suspecting a malicious distillation campaign, consider varying changes to responses across requests to complicate response quality evaluations, such that the subtle changes avoid triggering obvious alerts. Reducing reasoning depth, presenting correct information with different reasoning, or stylistic inconsistencies may evade detection while reducing training usefulness.

  Avoid informing China-based AI company users suspected of distillation campaigns of a switch to a downgraded model. Informing malicious distillers would enable them to improve their defense evasions and indicate when to roll back training.

they don't want suppliers to use it because it is a supply chain risk. specifically, the risk is that it is unreliable.

the designation stops suppliers from using it.

it stops it from being in the supply chain.

If Lockheed Martin disabled weapons systems when it discovered the Air Force using its fighters over Iranian airspace based on Lockheed's ideological views, I'm pretty sure they would be labeled a supply chain risk at minimum. What is the issue here?