Clearon AI

AI law and governance intelligence

Anthropic Wins A Permanent Injunction On The 3252 Track, But The FASCSA Fight Is Still Live

Editorial legal-tech image for Anthropic's AI procurement litigation, highlighting supply-chain-risk designations, constitutional limits, and federal contracting pressure.

Written by

Clearon AI

in

Anthropic just turned its March preliminary-injunction win into a full merits victory in the Northern District of California.

Judge Rita Lin permanently enjoined the participating government defendants from enforcing the challenged measures in Anthropic's Northern District of California case and vacated the specific designation and directive actions identified in the order. But the ruling resolves the 10 U.S.C. Section 3252 track, not the separate FASCSA track.

Commentary often treats the Anthropic supply-chain-risk dispute as a single case. It is not. Anthropic has been fighting two different supply-chain-risk designations under two different statutes in two different courts. This ruling is a sweeping loss for the government on the California path. It is not, by itself, the end of the Washington path.

What Judge Lin Just Did

Judge Lin's August 27 opinion and final-relief order turn the preliminary-injunction win into a merits victory for Anthropic.

First, the court held that the government's actions amounted to unlawful retaliation against Anthropic for protected speech. The final-relief order expressly declares that the challenged actions violate the First Amendment because they are "unlawful retaliation against Anthropic for constitutionally protected expressive activities." The opinion adds the broader warning: "The empty invocation of national security is not a blank check to punish and retaliate against government critics."

Second, the court held that Anthropic was denied the process the Constitution required before being publicly branded and cut off in this way. That due-process theme had already appeared in the March preliminary-injunction ruling, and the final-relief order now carries it through expressly.

Third, and most important for procurement lawyers, Judge Lin concluded that Anthropic does not meet the statutory definition of a supply chain risk on the record before the court. The opinion says that "[a]n IT vendor does not become a potential adversary of the United States whenever it asks probing questions or stubbornly insists on particular contracting terms, even if doing so causes DoW to doubt its trustworthiness." That is not just a procedural criticism. It goes to the substance of the government's theory under Section 3252.

The government's position was never simply that it did not want to buy Claude. It was free to stop buying Claude. The much more aggressive move was using national-security-flavored supply-chain machinery to treat Anthropic as if it were the kind of sabotage or subversion threat the statute was built to address. Judge Lin rejected that move in direct terms.

Why The 3252 Point Matters

Section 3252 is not a generic "we do not trust this vendor" statute.

Clearon's earlier Anthropic article walked through the preliminary-injunction ruling, where Judge Lin had already signaled deep skepticism that Anthropic's insistence on two usage red lines could turn it into a statutory supply-chain threat. The merits ruling confirms that conclusion. The opinion explains that Section 3252 was built to address "sabotage or subversion" by "foreign intelligence, terrorists, or other hostile elements," not a domestic vendor's public disagreement with the government's preferred AI-use terms.

If a frontier-model vendor can be labeled a supply-chain risk whenever it publicly criticizes the government's preferred uses or refuses one set of contract terms, then "supply chain risk" stops meaning sabotage or subversion and starts meaning policy defiance. Judge Lin rejected that stretch directly.

For AI companies, that is a meaningful line. It suggests that refusing to permit certain uses, even in a sensitive government setting, does not by itself permit the government to move from ordinary procurement discretion to a reputationally destructive national-security designation.

This Does Not Resolve The FASCSA Case

That does not mean Anthropic is fully out of danger.

The California ruling concerns the Section 3252 path and the related Presidential and Hegseth directives challenged in the Northern District of California. The separate D.C. Circuit case concerns a different designation under 41 U.S.C. Section 4713, part of the Federal Acquisition Supply Chain Security Act, or FASCSA.

Those two tracks overlap in business effect, but they are not interchangeable as law.

Judge Lin's ruling does not automatically erase the FASCSA designation. The D.C. Circuit case is still pending. CourtListener's D.C. Circuit materials show that the court denied Anthropic's emergency stay request in April, heard oral argument on May 19, 2026, later consolidated No. 26-1162 with No. 26-1049 after Anthropic filed a protective petition following the Secretary's June 3 reaffirmation, and then received Anthropic's August 28 Rule 28(j) letter invoking Judge Lin's ruling along with the government's September 3 response. As of this check, there is still no merits disposition reflected in the materials I could verify during this run.

The Ninth Circuit posture matters too. Judge Lin's opinion notes that the government's appeal from the March preliminary injunction was filed in the Ninth Circuit but then stayed at the parties' mutual request pending a ruling from the D.C. Circuit in the related case. So the California and Washington tracks are now intertwined not just strategically, but procedurally.

If you are advising a company that sells into or around the defense market, the takeaway is not "Anthropic won everywhere." It is "Anthropic won decisively on one statutory path, while the other path remains live."

Why The Two Cases Still Matter Together

Even though the statutes differ, the proceedings remain connected in practice.

The operational question is broader than either caption: how much freedom does the government have to punish or isolate an AI vendor that refuses certain military or surveillance uses?

The California decision pushes hard in one direction. It says the government cannot take a contract dispute, wrap it in national-security rhetoric, and convert it into retaliation for protected speech under a statute that does not fit the facts.

The D.C. Circuit case leaves more uncertainty in place. The stay denial did not resolve the merits, but it did allow the FASCSA designation to remain operative while the petition proceeds. Judge Lin's ruling may still matter there as persuasive authority, and Anthropic is already pressing it that way, but the government is disputing any claim that the California decision automatically carries issue-preclusive force into the Section 4713 proceeding because the statutes, actions, and processes differ. That means the practical consequences inside the defense ecosystem do not disappear just because California ruled for Anthropic.

That split matters for AI vendors that want defense business without giving the government unlimited control over product use. They now have better authority against an overbroad Section 3252 theory, but they still do not have a final appellate answer on the FASCSA route.

It also matters for government contractors, integrators, investors, and boards. They still need to ask which statute is doing the work, which forum controls, and what the live restrictions actually reach. Sloppy summaries could cause companies either to overcomply or to assume a designation vanished when it did not.

What Happens Next For The Government

The most obvious next step is to seek Ninth Circuit review of Judge Lin's merits ruling, along with a request for a stay pending appeal. Judge Lin already denied the government's request for a seven-day administrative stay, so any broader effort to narrow or pause the California relief now has to proceed through the ordinary appellate-stay path.

It may also try to argue for a more limited reading of the injunction or for partial relief tied to specific agencies or directives. The final-relief order leaves room for lawful procurement choices: it says the order does not require DoW to use Anthropic and does not prevent the government from transitioning to other AI providers so long as those actions comply with applicable statutes, regulations, and constitutional limits. But the ruling still amounts to a broad rejection of the theory that national security language can substitute for statutory fit and constitutional limits.

Meanwhile, the government can continue litigating the D.C. Circuit case. In business terms, that may now be the more important active front, because it preserves the possibility that one supply-chain-risk designation could survive even after the California path failed.

That does not mean the D.C. Circuit must come out differently on the merits. It only means the government still has a live forum in which to defend the FASCSA designation under a different statute, a different review path, and a different procedural posture.

What Companies Should Watch Now

Three follow-up questions matter most:

  1. Does the government seek an immediate stay pending appeal in the Ninth Circuit, and if so, does it get one?
  2. Does the government continue to lean on the D.C. Circuit case as its remaining live path for keeping pressure on Anthropic?
  3. How do agencies and contractors interpret the gap between the two rulings in day-to-day procurement decisions while the D.C. case remains unresolved?

Bottom Line

Anthropic just won a major merits ruling, and the easiest thing to blur is also the most important: this is the Section 3252 decision, not the FASCSA decision.

Judge Lin held that Anthropic does not meet the statutory definition of a supply chain risk, that the government's actions retaliated against protected speech, and that the company was denied due process. That is a serious defeat for the government's California strategy and an important signal to other AI vendors that procurement pressure does not automatically become lawful once officials invoke national security.

One more precision point matters. Anthropic did not win literally everything. Judge Lin rejected Anthropic's ultra vires claim, and the final-relief order also gives the government judgment as to certain non-participating defendants and certain Section 558 claims against specific agencies. But those partial defense wins do not alter the ruling's principal effect.

The business story is still larger than one courtroom. The D.C. Circuit case remains live, the FASCSA designation still matters, and any serious assessment of Anthropic's position with government customers has to keep both tracks in view at the same time.

Sources and Related Clearon Coverage

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

More posts