Anthropic Pentagon Blacklist: Appeals Court Denies Stay

What the court held

The U.S. Court of Appeals for the D.C. Circuit denied Anthropic's request for a stay pending appeal on Wednesday, April 8, leaving the supply chain risk designation in force while the underlying case proceeds. The panel accepted that Anthropic would likely suffer some degree of irreparable harm without a stay, but found that harm to be primarily financial, and it held that Anthropic had not shown its speech was actually chilled during the litigation. [1]

The panel weighed the two sides directly: "On one side is a relatively contained risk of financial harm to a single private company. On the other side is judicial management of how, and through whom, the Department of War secures vital AI technology during an active military conflict." [1]

Atlas interpretation: A stay motion asks a court to preserve the status quo while it decides the real question, and losing one is not a ruling on the merits. The panel said as much by grading the designation's constitutionality separately from the balance of harms; a company that mostly loses money if it waits has a weaker case for emergency relief than one that loses a right it cannot get back, whatever the eventual answer on whether the designation itself was lawful. [1]

One case wins, the other does not

Anthropic filed its challenge in two courts on the same day in March: a district court in California and the D.C. Circuit. A San Francisco federal judge had granted a preliminary injunction in late March narrowing the designation's reach, while the D.C. Circuit's April 8 order left the designation itself intact. The combined effect was a split: Anthropic stayed shut out of Department of War contracts, but the injunction kept every other federal agency free to use its models while the case continued. [1][2]

The department separately appealed the California injunction to the Ninth Circuit on April 2, an appeal the parties later agreed to stay pending the district court proceedings, so neither appellate track resolved the underlying legality of the designation this spring. [3]

How a usage dispute reached an appeals court

The dispute traces back to two carve-outs Anthropic would not drop from its government terms: mass domestic surveillance and fully autonomous weapons. Amodei refused the department's terms on February 26, the administration moved to bar Anthropic from federal work the next day, and the department made the supply chain risk label official on March 5, the first time the label had landed on an American company rather than a foreign adversary. Anthropic sued in both courts on March 9, arguing the designation was retaliation for protected speech. [1]

What this does not settle

The stay denial addressed only whether the designation would be paused during the appeal, not whether it was lawful. That question was decided months later, when a district judge ruled the designation itself unlawful, finding it retaliatory, arbitrary and a due process violation. [1]

Atlas interpretation: The April order is a reminder that emergency relief and merits review run on different clocks and different standards. Anthropic lost the motion that would have paused the designation immediately, then won the case about whether the designation should have existed at all. Reading only the April result would have suggested the government's position was strong; it was not, on the record that later emerged. [1]