A federal judge in California ruled on Thursday evening that the Trump administration’s designation of Anthropic as a supply-chain risk was illegal. 

U.S. District Judge Rita Lin said in her ruling that Defense Secretary Pete Hegseth’s labeling of Anthropic as a risk to national security signified “unlawful retaliation” in violation of the First Amendment, and said the decision was “arbitrary and capricious.” Lin also said Anthropic was denied due process, as required under the Fifth Amendment. 

Earlier this year, Hegseth and President Donald Trump labeled Anthropic a supply-chain risk and ordered all federal agencies, even those outside of defense, to stop working with the Claude maker.

The dispute stemmed from Anthropic setting hard lines on certain safety guardrails that would allow the Pentagon to use its models for fully autonomous weapons and mass surveillance of American citizens. The Pentagon denied that it would use Anthropic models for anything but lawful purposes, and alleged that Anthropic could try to control the military’s use of the models it bought and paid for. 

In her ruling, Lin said that the government’s “words and deeds confirm that the challenged actions were based on a desire to make a public example out of Anthropic for its ‘arrogance’ in criticizing the government.”

She pointed out the disconnect between the supply-chain label and other actions from the government, like Hegseth’s proposition to apply the Defense Production Act to Anthropic, “which would mean the company was essential to national security rather than a threat to it.” She also pointed to the Department of Defense continuing to pursue a contract with the company, and the government collaborating with the company’s new model, Mythos, for cybersecurity.

Lin also said it’s clear that Anthropic “undisputedly lacks” any backdoor access to its technology once it hands it over to the DOD. 

“Though the Department of War is undisputedly free to select the AI vendor of its choice, the evidence demonstrates that the broad measures imposed on Anthropic were illegal and baseless,” Lin wrote. “The empty invocation of national security is not a blank check to punish and retaliate against government critics,” she added.

“We welcome the court’s ruling that this supply chain risk designation was unlawful,” an Anthropic spokesperson said in a statement shared with TechCrunch. “We remain focused on working productively with the government to harness AI for our national security so all Americans benefit from this technology.”

Anthropic filed two complaints against the DOD in March in California and Washington, D.C. The D.C. suit is still ongoing. 

TechCrunch has reached out to the DOD for comment.