A federal judge in San Francisco has ruled the Pentagon crossed a constitutional line when it slapped Anthropic with a supply chain risk designation back in March. The court found the Department of Defense violated the First Amendment, concluding the blacklisting was retaliation for Anthropic’s public criticism of government AI policy. That’s not a minor procedural rebuke — it’s a federal court telling the military it can’t use procurement powers to punish speech it doesn’t like.

The backstory matters here. Anthropic had been in talks with the Pentagon about deploying Claude models, but negotiations collapsed over guardrails. The company wanted written guarantees its technology wouldn’t end up in autonomous weapons or mass surveillance systems. The Pentagon reportedly demanded unrestricted access. Shortly after those talks fell apart, the risk designation appeared. Anthropic sued in both San Francisco and Washington, and while the Washington case remains pending — meaning Anthropic technically stays on the blacklist for now — the San Francisco ruling establishes a meaningful legal precedent.

The timing is impossible to ignore. Anthropic is planning an IPO this fall, and a supply chain risk label from the Defense Department is exactly the kind of cloud that spooks institutional investors and complicates government contracts. The government has shown it’s willing to flex against AI companies — the brief ban on Fable earlier this year demonstrated that much. But a court now says there are limits to how far that flexing can go when First Amendment questions are in play.

For AI companies watching this unfold, the signal is mixed. The ruling validates the idea that public criticism shouldn’t carry procurement consequences, but the Washington case still needs to resolve before Anthropic is actually cleared. And the broader tension isn’t going anywhere: defense agencies want powerful AI tools without restrictions, while frontier labs keep insisting on ethical guardrails. That collision was always going to produce friction. Now at least one court has drawn a line around how the government can respond to it.