Judge Lin Rules the Pentagon's Anthropic 'Supply Chain Risk' Designation Unlawful Retaliation Under the First Amendment

U.S. District Judge Rita Lin (N.D. Cal.) ruled on Thursday evening, August 27, 2026 that the Pentagon’s designation of Anthropic as a “supply chain risk” was unlawful, and ordered the designation removed. The court found that Anthropic’s products did not constitute a meaningful threat to national security, that the designation was therefore “unlawful retaliation” in violation of the First Amendment, that it was arbitrary and capricious, and that Anthropic was denied due process under the Fifth Amendment. Reporting quotes the judgment describing the measures imposed on Anthropic as “illegal and baseless,” and Lin as finding that the Pentagon’s own public statements “indicated that the Trump administration’s efforts to blacklist Anthropic had less to do with national security … than retaliation.” Anthropic filed two complaints against DoD in March 2026 — California and the District of Columbia; the D.C. suit remains ongoing.

This is the first judicial answer to the sequence the corpus has tracked since February: Hegseth’s Defense Production Act ultimatum (2026-02-24–hegseth-threatens-anthropic-blacklist-military-ai-access), Anthropic’s refusal (2026-02-26–anthropic-rejects-pentagon-ultimatum-red-lines), the blacklist (2026-02-27–trump-blacklists-anthropic-supply-chain-risk-designation), and the dual filings (2026-03-09–anthropic-files-dual-lawsuits-pentagon-supply-chain-designation). What makes the ruling load-bearing is which ground it rests on. A finding that the designation was merely arbitrary and capricious would be ordinary administrative law — an agency that reasoned badly can reason again. A finding of First Amendment retaliation is a holding about motive: that the instrument was aimed at the company for what it refused to say and do.

That refusal is the thing the retaliation finding attaches to, and it was not about AI-safety abstractions. The CDT/Time disclosure (2026-03-16–cdt-reveals-pentagon-wanted-anthropic-bulk-data) reported that the Pentagon wanted help collecting and analyzing unclassified commercial bulk data on Americans — geolocation and web-browsing — and that Anthropic was willing to support FISA-authorized work, which carries judicial oversight, while declining the warrantless commercial-data layer. Senator Warren had already characterized the blacklist as retaliation for that position (2026-03-23–warren-calls-anthropic-blacklist-retaliation); a federal court has now reached the same characterization as a matter of law.

Primary-source update, 2026-09-20. The opinions have since been read directly (drafter pass for drafts/anthropic-refused-lin-ruling). The case is Anthropic PBC v. U.S. Department of War, No. 3:26-cv-01996-RFL (N.D. Cal.), Judge Rita F. Lin — caption, court and docket number independently confirmed via the CourtListener v4 search API. Two orders were filed 2026-08-27: Dkt. 250, a 59-page order on cross-motions for summary judgment, and Dkt. 251, a four-page order of final relief. The read confirms and corrects the press account in three ways:

1. First Amendment retaliation is a HOLDING, not a press gloss — Dkt. 251 ¶ 7 enters it as a declaratory judgment; ¶ 8 declares the Fifth Amendment due-process violation; ¶ 11 vacates the designation under 10 U.S.C. § 3252; ¶ 9 permanently enjoins.
2. It was not a clean sweep, and coverage missed this. Anthropic lost Count III (separation of powers) outright, and lost its APA claim as to HHS, Commerce, VA, SEC and NASA. The injunction expressly does not require the Department to buy anything from Anthropic.
3. The CDT/Time bulk-commercial-data account is NOT in the opinion. The words bulk, commercially available data, geolocation, browsing, data broker, FISA and Fourth Amendment do not appear across 59 pages. What the court found as undisputed fact is that Anthropic’s usage policy “prohibited mass surveillance of Americans and lethal autonomous warfare” — a finding about the category, not about the data-broker mechanism. Anything in this corpus that treats the CDT reframe as a judicial finding is wrong; it is an advocacy op-ed’s characterization and must be attributed to CDT by name.

The remaining caution. Whether the government appealed the August 27 final judgment is not established — no notice of appeal was found, but that absence is unconfirmed. The parallel D.C. matter (reported as No. 26-1049) is sourced to law-firm client alerts rather than the docket. Before any of this is used in published work, pull the opinion — the distinction between “First Amendment retaliation” as a holding and as a press characterization is exactly the sort of thing that requires the primary document. Date note: CNN dates the ruling August 27; NPR, Nextgov and TechCrunch carry August 28 publication dates while describing a ruling issued “Thursday evening.” August 28, 2026 was a Friday, so Thursday evening is August 27, and this entry is dated to the ruling rather than to its coverage. The case number and the specific remedy ordered are not established in the sources read.