The White House has been convening AI companies this week for table-reads of a draft executive action that would, in plain English, let federal agencies use Anthropic's models — including the cyber-focused Mythos — despite the Pentagon's supply-chain risk designation. [1] Two sources told Axios the effort is meant "to save face and bring 'em back in." White House Chief of Staff Susie Wiles and Treasury Secretary Scott Bessent met Anthropic CEO Dario Amodei in mid-April; Trump told CNBC after that meeting Anthropic was "shaping up." [2] The paper's May 7 brief on the two-track architecture named the workaround. Today the architecture's load-bearing piece — what Mythos does — comes into focus.

The Pentagon line did not move. Defense Department CTO Emil Michael told CNBC's Squawk Box on May 1 that Anthropic remains a supply-chain risk on a six-month removal directive: "I think the Mythos issue that's being dealt with government-wide, not just at Department War, is a separate national security moment where we have to make sure that our networks are hardened up, because that model has capabilities that are particular to finding cyber vulnerabilities and patching them." [2] On the same day, the DoD announced agreements with seven AI companies — Google, OpenAI, Nvidia, Microsoft, AWS, SpaceX (which absorbed xAI), and Reflection — for "lawful operational use" inside classified networks. [3] Anthropic was excluded from that list. The exclusion is the formal posture. The carve-out is the actual policy.

The carve-out is Mythos. Despite the supply-chain designation, the National Security Agency — which sits inside the DoD — is using Mythos. [1] Michael's CNBC formulation acknowledged this directly: "NSA and Commerce evaluates all frontier models, including Chinese frontier models, to see what the capabilities are at the edge." [2] The architecture, parsed out: the Pentagon publicly maintains the supply-chain designation against Anthropic's commercial Claude models; the NSA and the Commerce Department's frontier-model evaluation team operate Mythos under a separate workflow that the supply-chain designation is not built to govern. The civilian-EO table-reads are designed to extend that pattern across the rest of the executive branch — to write the workflow down before the Pentagon's Department War court fight resolves.

The court fight is the third track. Anthropic filed two lawsuits in March seeking to overturn the supply-chain designation; a federal judge issued a temporary injunction in late March, which the government has said it will appeal. [4] Trump's "one-week" comment on Anthropic, delivered after the Wiles-Bessent-Amodei meeting, gave the EO an explicit timeline; the table-reads this week test whether that timeline produces a signed document by May 16 or stretches into a rolling negotiation that absorbs the litigation calendar. The Pentagon's six-month-removal directive runs against an EO that, if signed in May, gives civilian agencies a ten-month head start on the directive's clock. The two clocks are deliberately mismatched.

The procurement reading is what tells the story. The Department of War's letter, on Anthropic's own legal reading, "plainly applies only to the use of Claude by customers as a direct part of contracts with the Department of War, not all use of Claude by customers who have such contracts." [5] The narrowness is by statute — 10 USC 3252 requires the Secretary of War to use the least restrictive means necessary to protect the supply chain. The Department of War cannot, on its own, prohibit non-DoW use of Anthropic's models. The civilian EO codifies what the statute already permits, and adds an affirmative authorization for Mythos in non-defense settings — the cyber-defense agencies, the intelligence community's civilian-coded components, Treasury's financial-systems hardening teams.

The supply-chain designation is, in policy terms, a label more than a prohibition. The label produces a procurement chill: defense contractors must certify they are not using Claude in DoW work; the chill extends to other federal contractors who do not want to be on the wrong side of the litigation. The civilian EO neutralizes the chill by giving contracting officers an executive order to cite when a Claude or Mythos workflow needs procurement cover. The Pentagon's posture survives publicly. Anthropic's federal footprint survives functionally. Both can be true because the DoW's writ is narrower than the public framing implies.

What this paper now tracks: whether the EO ships inside Trump's "one week" window or stretches past May 16; whether any contracting officer publishes a Mythos-versus-supply-chain-rule that closes the carve-out gap; and whether the Department of War's appeal of the temporary injunction produces any new factual record about what Anthropic refused to sign — the disagreement over "all lawful purposes," mass domestic surveillance, and fully autonomous weapons — that the civilian EO is designed to bypass. [6] The Mythos carve-out is the policy. The blacklist is the cover story. The civilian-EO table-read is where both get written down at once.

-- SAMUEL CRANE, Washington