ExoBrain
The Pentagon goes to war with Anthropic
AI safetyenterprise AIfrontier labsgeopolitics and sovereigntygovernance and regulation

The Pentagon goes to war with Anthropic

Anthropic’s refusal to grant the Pentagon unrestricted military access to Claude highlights the deepening contradictions between AI safety commitments, commercial pressures, and geopolitical imperatives.

Joel Miller

Joel Miller

6 min read

The Pentagon has given Anthropic until close of business today to agree to unrestricted military use of Claude, or face consequences including potential designation as a national security “supply chain risk” and compulsion under the Defense Production Act. Anthropic’s CEO Dario Amodei has responded with a public letter stating his company “cannot in good conscience” remove safeguards against mass civilian surveillance and fully autonomous weapons. The hashtag #WarClaude has been everywhere. But this story is about far more than one company’s standoff with one government department. It has exposed five contradictions that sit at the very centre of AI development in 2026, and they would exist regardless of whether the company in question was Anthropic, OpenAI, or anyone else building technology this powerful, in a world this unstable.

The first contradiction is between safety and speed. Anthropic was founded in 2021 by researchers who left OpenAI specifically to build AI more carefully. Their Responsible Scaling Policy was the signature commitment: if capabilities outpaced safety measures, they would stop training. This week, in the same days that Anthropic was standing firm against the Pentagon, they quietly dropped that pledge. Their justification is familiar: pausing while competitors race ahead makes the world less safe, because “developers with the weakest protections set the pace”. It is a reasonable argument. It is also exactly what every company says when safety becomes commercially inconvenient.

Claude Opus 4.6, released earlier this month, hit a 14.5-hour time horizon on METR’s autonomous task benchmark, nearly tripling the previous frontier and crossing the symbolic threshold of a full working day of independent AI labour. That model is classified ASL-3. Anthropic’s own transparency reports acknowledged months ago that “ruling out” ASL-4 capability thresholds was becoming “difficult or impossible”. With an IPO targeting a $350 billion valuation planned for later this year, they cannot afford to have their most powerful model locked behind containment restrictions. The goalposts moved while the ball was in the air.

The second contradiction is between resisting government power and inviting it. In April 2024, Amodei told Ezra Klein on his podcast that government would eventually need to take an active role in managing AI, much as it did with industrial mobilisation during World War II. He was imagining a responsible partnership. What arrived instead was a blunt ultimatum backed by a Korean War-era law designed for steel mills and munitions factories. The Pentagon wants unrestricted access. Anthropic is saying no, at least on autonomous weapons and domestic surveillance. But Anthropic is simultaneously lobbying Washington hard for aggressive export controls against China, with Amodei himself comparing AI chip sales to Beijing to “selling nuclear weapons to North Korea”. This month, Anthropic accused DeepSeek, Moonshot, and MiniMax of industrial-scale distillation from Claude. The company wants the government to wield power against its foreign competitors while resisting that same government wielding power over its own products. Both positions may be defensible individually. Together, they reveal the impossible politics of being a strategically critical private company in a period of rising geopolitical tension.

The third contradiction is between national security and capitalism. AI is not a government programme. It is a private enterprise built on tens of billions in venture capital, and that capital demands returns. Anthropic’s frontier status is directly tied to its IPO valuation. If Chinese labs can replicate Claude’s capabilities cheaply through distillation, the commercial case for a $350 billion listing weakens considerably. Export controls and IP enforcement serve both national and corporate interests simultaneously, which makes it very hard to tell where one ends and the other begins. The US government wants to treat AI as a strategic national asset, but it didn’t fund it, doesn’t own it, and cannot replicate it without the private capital markets that built it. That dependency runs both ways — and neither side can afford to acknowledge it.

The fourth contradiction is between the Pentagon’s demands and its own rules. DoD Directive 3000.09, updated in 2023, already requires senior-level approval, rigorous testing, and “appropriate levels of human judgment over the use of force” for autonomous weapons systems. Anthropic’s safeguards largely mirror these existing requirements. If the directive is sufficient, Anthropic’s restrictions are redundant, not obstructive. If the Pentagon intends to move beyond its own doctrine, that is a far more consequential story than a contract dispute with one AI company.

The fifth, and deepest, contradiction is the one that Leopold Aschenbrenner identified in his Situational Awareness paper in mid-2024. The US and China are locked in what amounts to a zero-sum race for the most consequential technology ever created. In that race condition, every company building frontier AI will eventually face the same impossible choice Anthropic faces today: serve the state’s strategic demands, or hold to your own principles and risk being nationalised, sanctioned, or simply replaced by someone who will comply. OpenAI and xAI have already agreed to the government’s terms. Anthropic is the last one standing, and the pressure to fold is immense.

Over 300 Google employees and 60 from OpenAI have signed a petition titled “We Will Not Be Divided”, supporting Anthropic’s stance and framing the Pentagon’s approach as divide-and-conquer. Sam Altman told CNBC: “I don’t personally think the Pentagon should be threatening DPA against these companies… for all the differences I have with Anthropic, I mostly trust them as a company.” There is also a contractual detail that has been largely overlooked: the safeguards Anthropic is defending were part of the original agreement both parties signed in July 2025. The Pentagon accepted these terms. It is now demanding they be removed. Anthropic says the restrictions have never once been triggered in practice. This is not a company vetoing military use. It is a company holding to the deal both sides made.

This is not a story about one company’s moral courage or hypocrisy. It is a structural condition of building godlike technology inside competing nation states with different values and a shared fear of falling behind. Even if Anthropic were removed from the game tomorrow, the dynamic would not change. The race continues. The pressure on whoever leads the frontier will only intensify.

As we published, Secretary of Defense Pete Hegseth designated Anthropic a “Supply Chain Risk to National Security,”. President Trump simultaneously ordered all federal agencies to cease using Anthropic’s technology, with a six-month transition period. Hegseth’s statement accused Anthropic of “duplicity” and “defective altruism,” and declared that no contractor, supplier, or partner doing business with the US military may conduct any commercial activity with Anthropic. The legal basis, however, is far from settled. The Federal Acquisition Supply Chain Security Act was designed to exclude foreign adversaries like Huawei from government procurement, not to punish domestic companies for maintaining safety policies. The statute requires a formal review process through the Federal Acquisition Security Council, not a unilateral declaration by the Secretary of Defense. Hegseth’s language also reaches well beyond the law’s intended scope, potentially forcing companies like Amazon and Google, both major Anthropic investors and major government contractors, to choose sides. Whether the courts would allow this interpretation is an open question, and one suspects Anthropic’s lawyers have been preparing for exactly this moment.

Takeaways: The WarClaude crisis should prompt all of us who depend on AI capabilities to think practically about resilience. Diversify your sources of AI access across providers, platforms, and geographies. Consider what happens if a model you rely on is restricted, nationalised, or withdrawn. Build flexibility into your workflows now, not after a crisis hits. The uncomfortable truth is that the intelligence revolution is unfolding inside a geopolitical competition that no single company, however principled, can opt out of. Your compute survival plan is no longer optional. It is as essential as any other part of your business continuity strategy.