The Anthropic–Pentagon split
The Department of Defense moving its classified AI work off Anthropic after a dispute over surveillance and autonomous-weapons contract terms.
Does the transition complete on schedule, and what replaces the contract safeguards Anthropic sought? Settled by: a department statement or filing after 30 September confirming completion, or a court order pausing it.
Where this stands as of Monday, 26 October 2026
As of 26 October the designation is being contested by people who used to run the agencies that made it, and nothing new has been published about what replaced Claude. On 20 October 17 bipartisan former national security officials, among them a former Director of National Intelligence and two former National Security Advisers, filed a 26-page brief supporting Anthropic's petition for rehearing en banc in the D.C. Circuit. They argue that "Left undisturbed that ruling will threaten all defense contractors", that "No other court can revisit it", and that the panel decision "would set a dangerously erroneous standard".
The brief goes at the process rather than the merits of the two capabilities at issue. It argues that had the department "engaged in a lawful process, it would have considered the specific risks posed by the two capabilities Anthropic refused to provide", which it names as mass domestic surveillance and lethal autonomous weapons, and that the department "has not explained why DOD should have the first, much less how it could exercise it lawfully. Nor has DOD reconciled the second with the United States' commitment that [its military use of AI be in compliance with applicable international laws]". It describes the designation as applied before any administrative steps or formal justification, alongside public denunciations.
The second half of the arc's question is where it was in September. No department document has been published saying what replaced Claude in which role, and none says what replaces the contract safeguards Anthropic declined to relax. The Pentagon did not comment on the brief, and the court has not ruled on the petition. The Project Agincourt letter setting a date for an Autonomous Warfare Command, released the day after the brief was filed, does not mention Anthropic, the designation or any vendor dispute, and no source connects the two in either direction.
What changed: The challenge gained institutional backing: 17 former national security officials, bipartisan and including a former Director of National Intelligence, filed in support of rehearing and framed the designation as a process failure that would reach every defence contractor. Nothing was published about the replacement for Claude or the contract terms, and the Pentagon's own autonomy announcement the next day made no reference to the dispute.
How it has changed
Every earlier "where this stands", kept as written.
Monday, 19 October 2026 — The dispute moved back into court. Anthropic petitioned the D.C. Circuit for rehearing, framing the designation as retaliation for its published AI-safety commitments and setting the panel's First Amendment holding against an August district-court ruling that found the opposite on a parallel designation. Nothing new was published about what replaced Claude or about the contract terms at the centre of the split, and the supplier side continues to say the transition had no operational impact.
As of 19 October the transition is treated as done by the supplier side and is being contested in court by Anthropic. Palantir's chief technology officer said on television that there has been no operational impact from the Pentagon dropping Anthropic and that Claude is already replaced, naming no replacement for any role. On 13 October Anthropic filed a petition for panel rehearing or rehearing en banc in the D.C. Circuit in Anthropic PBC v. U.S. Department of War. CNBC quoted the filing: "The Secretary of War branded Anthropic — an American AI company whose models help defend the nation — a national-security 'supply chain risk' because it declined to permit its models to be used for mass surveillance of Americans or lethal autonomous warfare and publicly explained those AI-safety commitments. A divided panel upheld that extraordinary designation." Anthropic argues the court ignored "straightforward evidence the designation was retaliation for Anthropic's speech about AI safety."
The filing sets up a conflict between two courts. Reporting on the petition says Anthropic contrasts the panel's First Amendment holding with an August ruling by a San Francisco federal judge, who found that the Department of Defense had violated Anthropic's First Amendment rights and that the supply-chain-risk designation amounted to illegal retaliation, and calls the two irreconcilable. The petition also argues that the majority's reading of "otherwise manipulate" conflicts with Fischer v. United States, and quotes Judge Henderson's dissent: "Agree to the Secretary's demands or risk being designated a national security threat."
The second half of the arc's question remains unanswered. No department document has been published saying what replaced Claude in which role, and none says what replaces the contract safeguards Anthropic refused to relax. A Pentagon spokesperson told CNBC the agency does not comment on pending litigation, and Anthropic declined to comment beyond the filing. The court has not ruled on the petition.
Monday, 12 October 2026 — The department said for the first time, through an official's statement to the BBC, that it has ceased using Anthropic products — the statement this arc's question asked for, though not a filing, and carried by one outlet only. Palantir's chief technology officer said on television that Claude is already replaced and there was no operational impact, naming no replacement for any role. The second half of the question is still open: Anthropic tightened its own weapons and surveillance prohibitions, and no document says what replaces the contract terms the department refused to relax.
As of 12 October the department has said in words what no document has yet recorded. A Department of Defense official said in a statement in the first week of October that the Pentagon "has ceased the use of Anthropic products", the BBC reported — the first time the department has said the transition is done. The BBC adds that Defence Secretary Pete Hegseth labelled Anthropic a supply chain risk in February, set a six-month phase-out at the end of that month and announced the Pentagon would stop using it by late August, and that "It is not clear why there has been a delay." No filing, memorandum or published department document records the completion, and the statement names no replacement. The BBC is the only outlet carrying it.
What the record does contain is the other side's account. On CBS's "Face the Nation", Palantir chief technology officer Shyam Sankar said "there's been no operational impact from that", that the Department "has a wide range of model providers, everything from XAI and OpenAI to open-weight models like Nemotron from NVIDIA", and "It's already been replaced. It's already been replaced." He named no provider for any specific role and gave no figures for the volume of work moved, and the Department has not confirmed his assessment. Multiple people familiar with the matter told the BBC that Claude was still being used by the department in research, analysis and intelligence gathering as well as in military operations against Iran as recently as the week before the statement, and that the Pentagon has signed contracts with Google, xAI and OpenAI.
On the safeguards this question also tracks, the supplier moved and the government did not. Anthropic published a Usage Policy update, effective November 12, stating that "The updated section makes clear that our prohibitions include the software and components that make weapons work, as well as actions like arming drones and other autonomous vehicles", and that "Claude cannot be used to decide or recommend who to investigate, arrest, or charge in a law enforcement or criminal justice process. We also prohibit Claude from being used to build or improve tools designed for surveillance." Anthropic says both changes reflect how it has enforced its previous policy. The post does not mention the Pentagon, any government contract or the designation, and nothing published in this period says what, if anything, replaces the contractual prohibitions the department refused to relax.
Monday, 28 September 2026 — The dispute moved from a procurement decision to a precedent: a federal appeals court upheld the exclusion and put the Department's reasoning into a published opinion, with a dissent arguing the ruling lets the Secretary condition supplier status on dropping use restrictions. The transition itself is still unconfirmed by any department statement or filing.
As of 28 September the split has a published court judgment and the Department's reasons are on the record in the government's own words. The D.C. Circuit decided Anthropic PBC v. United States Department of War in late September. Circuit Judge Katsas wrote for the court, Circuit Judge Henderson dissented, and CNBC and Courthouse News both report the vote as 2-1 with Circuit Judge Rao joining. The opinion states that the Department excluded Claude from its supply chain under the Federal Acquisition Supply Chain Security Act after Anthropic refused to relax contractual prohibitions on the use of Claude for lethal autonomous warfare or domestic surveillance, and that the Department had ample support for its conclusion that continued integration of Claude presented a statutorily covered national-security risk. It records that Under Secretary for Research and Engineering Emil Michael cited Anthropic's refusal to allow all lawful uses and its ability to alter system guardrails and model weights. Anthropic's due-process and First Amendment claims were rejected.
What the ruling does not settle is the thing this storyline tracks. The opinion never mentions GenAI.mil, the Maven Smart System, or any model that replaced Claude; the transition status rests where it did, on one official's word. Henderson's dissent argues the case turns entirely on the scope of the residual clause and warns that a future contractor faces a choice between agreeing to the Secretary's demands or being designated a national security threat. An Anthropic spokesperson said the company is considering all options, including further review, and noted that another federal court has held a parallel designation unlawful; Breaking Defense reports the remaining routes are a discretionary en banc rehearing or a Supreme Court petition. No department statement or filing confirming completion of the transition has been published.
Monday, 14 September 2026
As of 14 September the transition is nearly done, on one official's word. Emil Michael, Under Secretary of Defense for Research and Engineering, told DefenseScoop that about 90% of classified AI workloads have moved off Anthropic, with the rest due by the end of September; DefenseScoop reports OpenAI's ChatGPT, xAI's Grok and Google's Gemini are being deployed in its place, and that the break followed Anthropic's attempt to secure contract terms preventing use for mass surveillance of US citizens or fully autonomous lethal weapons, which the department rejected. No other outlet had matched the figure as of this snapshot, and no contract documents have been published.
Timeline
Every item filed under this storyline, newest first, with its sources.
Thursday, 22 October 2026
Seventeen former national security officials urge the D.C. Circuit to rehear Anthropic's Pentagon designation case UpdateSingle source
- DefenseScoop reports that 17 former senior national security officials, diplomats and intelligence professionals from both parties filed a 26-page brief urging the D.C. Circuit to rehear Anthropic's challenge en banc. Named signatories include former Director of National Intelligence Avril Haines and former National Security Advisers Susan Rice and Jake Sullivan.
- DefenseScoop quotes the brief: "Left undisturbed that ruling will threaten all defense contractors," and "No other court can revisit it," with the filers arguing the designation standard "would set a dangerously erroneous standard." They argue the "national security risk" label was pretextual because the Pentagon announced the penalty and public denunciations on social media before any formal justification.
- DefenseScoop's timeline: in February 2026 Secretary Pete Hegseth designated Anthropic a supply-chain risk to national security, a label usually reserved for foreign adversaries, barring defense contractors from commercial business with it; in summer 2026 a federal judge in San Francisco ruled for Anthropic, calling the Pentagon's actions retaliatory; in September 2026 the D.C. Circuit ruled 2-1 for the Pentagon. DefenseScoop says Anthropic had refused Pentagon demands to allow "all lawful use cases," objecting to mass domestic surveillance of Americans and to autonomous weapons that can attack without human intervention.
- An update on a story this briefing has followed, and single-sourced: the brief was filed on 20 October and DefenseScoop's report of its contents is what falls inside the window. The Pentagon had not commented before publication, and DefenseScoop does not link the brief or the docket.
Wednesday, 14 October 2026
Anthropic petitions the D.C. Circuit for rehearing of the Pentagon's supply-chain-risk designation Single source
- Anthropic filed a petition on Tuesday asking the federal appeals court in Washington, D.C. to rehear its appeal over the Pentagon's blacklisting of its models. Its attorneys wrote: "The Secretary of War branded Anthropic — an American AI company whose models help defend the nation— a national-security 'supply chain risk' because it declined to permit its models to be used for mass surveillance of Americans or lethal autonomous warfare and publicly explained those AI-safety commitments. A divided panel upheld that extraordinary designation." They also wrote that the court ignored "straightforward evidence the designation was retaliation for Anthropic's speech about AI safety".
- Per CNBC, the Defense Department applied the supply-chain-risk label in March, blocking defense contractors from using Anthropic's technology in their work with the agency; in September the D.C. Circuit upheld it 2-1, rejecting Anthropic's argument that the ban was arbitrary, unauthorized and unconstitutional. In a parallel case, a San Francisco federal judge ruled in August that the DOD had violated Anthropic's First Amendment rights and that the designation amounted to illegal retaliation.
- The two rulings point opposite ways on the same facts, which is the ground Anthropic is asking the full D.C. Circuit to revisit.
- CNBC notes Anthropic signed a $200 million contract with the Pentagon in July 2025, and that talks collapsed in September of that year over Claude's deployment on the DOD's GenAI.mil platform. A petition for rehearing is a request, not a grant. Anthropic declined to comment beyond the filing and a Pentagon spokesperson said the agency does not comment on pending litigation. Only CNBC has reported the filing.
Monday, 12 October 2026
Palantir CTO says there has been no operational impact from the Pentagon dropping Anthropic, which is already replaced Company claim
- Asked on "Face the Nation" about the Department ceasing to use Anthropic products over the firm's insistence on safeguards for military use — with Claude having been part of the Maven platform Palantir runs — Sankar said "the Department today has a wide range of model providers, everything from XAI and OpenAI to open-weight models like Nemotron from NVIDIA, so… there's been no operational impact from that", and then "It's already been replaced. It's already been replaced" and "No impact."
- He framed multi-vendor model choice as the commercial lesson: "your sovereignty and agency as an institution comes down to your ability to kind of control, decide which models you're going to use in what context, have the ability to switch models, to be able to control the weights themselves", and said this "has been powering the growth of our commercial business".
- Sankar did not say which provider replaced Anthropic in which role, and gave no figures for the volume of work moved. The assessment that there was no operational impact is Palantir's and has not been confirmed by the Department.
Four documents in the same week cover the same question from four directions. A Department of Defense official said on 5 October that the Pentagon has ceased the use of Anthropic products. On 8 October Anthropic published a Usage Policy update, effective November 12, stating that its prohibitions include the software and components that make weapons work, as well as actions like arming drones and other autonomous vehicles. On 5 October the Senate Armed Services Committee's additions to the pending defense bill would require human oversight of AI-controlled weapons and ban the use of AI for nuclear launch or detonation. On 11 October Palantir's chief technology officer said of the Anthropic decision: "It's already been replaced."
Friday, 9 October 2026
Anthropic's Usage Policy update, effective November 12, bars weapons software and arming drones
- Anthropic says "The updated policy takes effect on November 12." On weapons, it writes that the policy "has always prohibited using Claude to develop weapons" and that the updated section "makes clear that our prohibitions include the software and components that make weapons work" "as well as actions like arming drones and other autonomous vehicles". The post says this reflects existing enforcement.
- The surveillance and law-enforcement section is rewritten: "tracking people without their consent is prohibited, whether it happens in real time" or from previously collected data; "Claude cannot be used to decide or recommend who to investigate, arrest, or charge"; and "We also prohibit Claude from being used to build or improve tools designed for surveillance." Consented tracking such as fraud monitoring, content moderation, journalism and legal research remain permitted.
- Rules on fake accounts, fabricated news sites and influence operations are consolidated into a new section, "Do Not Engage in Deceptive Campaigns or Artificial Activity", and the elections section is renamed "Do Not Undermine Democratic Processes". The blanket ban on personalised vote and campaign targeting is removed, with deception and misuse of voters' personal data still prohibited elsewhere. New requirements apply when Claude controls hardware taking autonomous physical actions that could cause injury: a qualified operator must be able to observe and stop the equipment, which must hold a safe state if Claude is disconnected.
- The post also prohibits sustained, needless abusive or cruel behaviour toward the models, but says this applies only in extreme cases and excludes frustration, pushback, dark creative themes and testing or research. It does not say how the weapons or surveillance clauses will change any existing government contract.
Tuesday, 6 October 2026
Pentagon tells BBC it "has ceased the use of Anthropic products" after a six-month phaseout mixedSingle sourceUpdate
- A Department of Defense official said in a statement on Monday that the Pentagon "has ceased the use of Anthropic products", the BBC reports. Defence Secretary Pete Hegseth labelled Anthropic a supply chain risk in February and announced the Pentagon would stop using it by late August; the BBC reports it is not clear why there has been a delay.
- Multiple people familiar with the matter — former US defence officials and contractors who worked with the Pentagon on AI — told the BBC that as recently as last week Claude was still being used by the department in research, analysis and intelligence gathering as well as in military operations against Iran, and was viewed as "a critical tool for sorting through vast quantities of information".
- Anthropic was the first advanced AI company to have its tools deployed in US government agencies doing classified work, from 2024. The BBC reports Anthropic called the designation "unprecedented and unlawful" and has sued the Trump administration to overturn it, that the Pentagon has since signed contracts with Google, xAI and OpenAI, and that OpenAI tools have been "more widely adopted in recent months in some military departments". An Anthropic spokesman declined to comment. The BBC's own page could not be opened; this is read from the syndicated copy.
Monday, 28 September 2026
A court, a province, an appeals panel and a legislature each took up a version of the same question inside seven days. On 21 September British Columbia filed against OpenAI and Sam Altman; Quartz reports the complaint charges that OpenAI put a dangerous product into the market and fell short of product liability requirements. On 25 September the D.C. Circuit denied Anthropic's petitions, and Judge Katsas wrote that the Department excluded Claude after Anthropic refused to relax contractual prohibitions on the use of Claude for lethal autonomous warfare or domestic surveillance. Read side by side, the two cases turn on opposite readings of a company's control over its own model: the British Columbia complaint is about a failure to notify law enforcement, and the Department's determination is about contractual use restrictions and, in the opinion's words, Anthropic's ability to alter system guardrails and model weights.
Saturday, 26 September 2026
D.C. Circuit upholds the Pentagon's designation of Anthropic as a supply-chain risk, 2-1, keeping Claude barred
- A three-judge panel ruled 2-1 on Friday, rejecting Anthropic's argument that the ban on its Claude models was arbitrary, unauthorised and unconstitutional. CNBC quotes Judge Gregory Katsas, joined by Judge Neomi Rao: "The Department had ample support for its conclusion that the continued integration of Claude into the Department's information systems, by the Department or its contractors, presented a statutorily covered national-security risk", and "In our Republic, it is the President and the Secretary of War who must determine how best to balance the competing risks."
- CNBC reports the Department of Defense labelled Anthropic a supply chain risk in March, barring the US military from using its models and blocking defence contractors from using them in work for the department. Anthropic signed a $200 million contract with the Pentagon in July 2025; talks collapsed that September over deployment on GenAI.mil, with the department seeking unfettered access across all lawful purposes and Anthropic seeking assurance its technology would not be used for fully autonomous weapons or domestic mass surveillance.
- Judge Karen LeCraft Henderson dissented on statutory grounds. Courthouse News quotes her: "But suppose the secretary tells Anthropic's presumed replacement to change its AI-use policies to permit any 'functions that the department deems necessary' or it will share the same fate as Anthropic."
- The panel delayed the decision taking immediate effect so Anthropic can seek panel rehearing or en banc review. An Anthropic spokesperson told CNBC: "We respectfully disagree with the court's decision. Another federal court has already held the government's parallel designation unlawful. We remain confident in our position and are considering all options, including further review." CNBC says a San Francisco federal judge struck down the parallel designation last month. The opinion PDF opens but could not be rendered to text, so the quoted language here is as CNBC and Courthouse News report it.
Saturday, 12 September 2026
Pentagon says about 90% of classified AI workloads have moved off Anthropic, with the rest due by the end of September mixedSingle source
- Emil Michael, Under Secretary of Defense for Research and Engineering, said "I'd say about 90% has transitioned", with completion targeted for the end of the month. OpenAI's ChatGPT, xAI's Grok and Google's Gemini are being deployed across classified and unclassified systems in place of Anthropic's models.
- DefenseScoop reports the break followed Anthropic's attempt to secure contract terms preventing its models being used for mass surveillance of US citizens or fully autonomous lethal weapons; the department rejected them, insisting its software be available for "all lawful purposes".
- The Pentagon has designated Anthropic a national security supply chain risk under two separate laws. One case has been adjudicated in the Northern District of California; a second is pending before the D.C. Circuit, which Michael said has not granted a preliminary injunction and is expected to rule "in the next month or two".
- This is the first public figure on how far the migration has gone, and it comes from the department rather than from Anthropic, which is not quoted. DefenseScoop is the only outlet we could open with an in-window timestamp.
Tracked figures
- 17 former national security officials
- bipartisan signatories of a 26-page brief supporting Anthropic's petition for rehearing en banc in the D.C. Circuit Mon 26 Oct DefenseScoop
- 13 October 2026
- date Anthropic filed its petition for rehearing or rehearing en banc in the D.C. Circuit Mon 19 Oct CNBC
- about 90%
- of classified AI workloads moved off Anthropic, per Under Secretary Emil Michael Fri 11 Sep DefenseScoop
Open questions
What replaced Claude in which Pentagon role, and what replaces the contract safeguards Anthropic refused to relax?
- What would settle it
- A department memorandum, contract action, inspector-general report or congressional testimony naming the replacement systems, or a published contract award for the replaced workloads.
- Asked
- Mon 12 Oct
Does Anthropic seek rehearing or Supreme Court review, and is the split with the Northern District of California resolved?
- What would settle it
- A petition for rehearing or certiorari appearing on the docket, or the mandate issuing with no petition filed.
- Asked
- Mon 28 Sep
Does the department confirm completion after 30 September?
- Settled
- Mon 5 Oct — A Department of Defense official said in a statement reported by the BBC that the Pentagon "has ceased the use of Anthropic products". No filing or published department document records the completion, the statement names no replacement, and the BBC is the only outlet carrying it. source
- Asked
- Mon 14 Sep