The timeline is the story. On March 3, the Pentagon formally designated Anthropic a supply-chain risk to national security — the first time in American history the government has applied such a designation to a domestic company. On March 4, Under Secretary of Defense Emil Michael emailed Anthropic CEO Dario Amodei to say the two sides were "very close" on the two issues the government now cites as evidence that Anthropic is a threat: its positions on autonomous weapons and mass surveillance of Americans. [1]

That email, attached as an exhibit to a sworn declaration filed Friday in a San Francisco federal court, is the most damaging piece of evidence in Anthropic's lawsuit against the Department of Defense. Not because it proves the government was acting in bad faith — that remains for Judge Rita Lin to decide at a hearing scheduled for Tuesday — but because it makes the government's public narrative almost impossible to square with its private communications. [1]

On March 5, Amodei published a statement saying the company had been having "productive conversations" with the Pentagon. On March 6, Michael posted on X that "there is no active Department of War negotiation with Anthropic." A week later, he told CNBC there was "no chance" of renewed talks. The distance between "very close" in a private email and "no chance" on cable news is the distance the lawsuit needs to travel. [1]

The declaration came from Sarah Heck, Anthropic's Head of Policy and a former National Security Council official under Obama. Heck was present at the February 24 meeting where Amodei sat down with Defense Secretary Pete Hegseth and Michael. She disputes what she calls "a central falsehood" in the government's filings: that Anthropic demanded an approval role over military operations. "At no time during Anthropic's negotiations with the Department did I or any other Anthropic employee state that the company wanted that kind of role," she wrote. [1]

A second declaration, from Anthropic's Head of Public Sector Thiyagu Ramasamy, takes on the technical claims. The government argues Anthropic could theoretically disable its AI mid-operation — a remote kill switch scenario. Ramasamy, who spent six years at AWS managing classified AI deployments before joining Anthropic, says this is physically impossible. Once Claude is deployed inside an air-gapped government system, Anthropic has no access to it. There is no backdoor, no mechanism to push unauthorized updates, and no ability to see what users are typing. A change to the model would require the Pentagon's own action to install. [1]

The broader legal question is whether the supply-chain designation — which bars federal agencies from contracting with Anthropic — constitutes government retaliation for the company's publicly stated views on AI safety. Anthropic says yes, citing the First Amendment. The government says Anthropic's refusal to allow all lawful military uses of its technology was a business decision, not protected speech.

The private email makes the retaliation argument easier to believe and harder to dismiss.

-- DAVID CHEN, Beijing