The civilian-agency executive order that would restore federal access to Anthropic's Claude and Mythos models is in table-read this week inside the Office of Management and Budget, with industry counsel workshopping language against the Pentagon's standing supply-chain risk designation. [1] Axios first surfaced the drafting on April 29; Bloomberg paired it on April 30 with the broader Mythos cybersecurity track. [2] At the same hour the civilian language is being finalized, the Pentagon is doing the opposite: on May 1 it announced formal classified-network deals with seven AI vendors — SpaceX, OpenAI, Google, NVIDIA, Reflection, Microsoft, AWS, and Oracle — and explicitly excluded Anthropic. [3]
This paper's May 5 account called the situation a contradictory regulatory regime inside one administration. Wednesday makes the contradiction operational. DOD CTO Emil Michael told CNBC on May 1 that Anthropic remains a supply-chain risk while Mythos is a "separate national security moment" — a reading the Department of War cannot hold without conceding that the underlying designation is about negotiating posture, not capability. [4] The civilian EO is the executive-branch acknowledgment that the Pentagon's posture cannot govern DHS, the VA, GSA, or — most awkwardly — the National Security Agency, which is reportedly already running Mythos Preview against vulnerability scans. [1]
The procurement detail matters because the EO is not a presidential statement; it is a bureaucratic instrument. To clear a single vendor through one agency while another department keeps it blacklisted requires either a carveout from the Federal Acquisition Security Council process or a directive that civilian agencies treat the supply-chain-risk designation as Pentagon-specific. Both routes exist. Both produce litigation. Anthropic's own injunction against the Pentagon is still pending in the Northern District of California, where the company is challenging the original designation as arbitrary and capricious. [3]
The corporate read on Wall Street is simpler. The civilian EO would unblock the federal-procurement pipeline that institutional investors had already priced into Anthropic's last secondary at a $375 billion valuation. The Pentagon line item is a smaller piece of that pipeline than the civilian agencies — DHS alone runs more contracted AI work than the Department of War — and the prospect of the EO is what is keeping the late-stage round on schedule into the summer. The Pentagon designation, in this read, is not the constraint; the EO is the release. [2]
What is conspicuous is who is not in the room. Microsoft, AWS, and Oracle — three of the seven Pentagon classified-network vendors — also resell Anthropic models on their cloud platforms. Microsoft's general counsel said in March that Claude can remain available through M365, GitHub, and Microsoft AI Foundry "to all customers other than the Department of War." [3] That carveout, struck quietly two months ago, is the template the civilian EO is now formalizing across the rest of the executive branch. The Pentagon is not winning the argument; it is being routed around.
President Trump told CNBC last week that a deal between Anthropic and DOD is "possible" and that the company is "very smart" and could "be of great use." [4] The remark is consistent with the table-read pattern: the White House drafts the civilian release, the Pentagon keeps the symbolic freeze, and the substantive question — whether the U.S. government can in fact stop using Anthropic — is answered week by week in the negative. The NSA is already past it. Mythos is already being evaluated. The EO is the paperwork.
The week ahead will turn on whether the EO language survives interagency comment without weakening the Pentagon designation enough to surface a contradiction Anthropic's lawyers can use in court. If it does, the civilian agencies get their model back without the Pentagon ever conceding the original designation was wrong. If it doesn't, the contradiction lands on Judge Chhabria's desk as evidence that the supply-chain risk label was always about leverage, never about supply chain.
-- THEO KAPLAN, San Francisco