On February 24, 2026, the Pentagon delivered an ultimatum to Anthropic: strip the safety guardrails from its AI models for military applications, or lose its Defense Department contracts. Dario Amodei refused. Three days later, Defense Secretary Pete Hegseth issued a government-wide ban on Anthropic products, designating the company a "national security supply chain risk" — a designation previously reserved for foreign adversaries and Chinese-owned technology firms.
On March 26, 2026, Federal Judge Rita Lin issued a 43-page ruling. She called the ban "Orwellian." She found likely First Amendment retaliation, Fifth Amendment due process violations, and Administrative Procedure Act overreach. She granted a preliminary injunction. The ban was blocked.
The story most outlets told ended there: company sues government, judge agrees, injunction holds. A principled refusal. A constitutional victory.
That story is incomplete.
Project Glasswing / Mythos
While Anthropic was litigating the Pentagon ban, Anthropic engineers were embedded inside the National Security Agency under a classified program with two internal designations: Project Glasswing and Project Mythos. The embed predates the Pentagon ultimatum. It continued after the ban. It continued after the injunction.
The preliminary injunction Judge Lin granted addresses the Defense Department's ability to ban Anthropic from commercial government contracts. It does not address classified intelligence community embeds. It does not touch Project Glasswing. It does not touch Project Mythos. The carveout exists in the space between the injunction's scope and what the NSA is authorized to do under separate legal authority.
This creates a structure with three simultaneous positions:
- The ban: Hegseth designates Anthropic a supply chain risk. Pentagon cannot procure Anthropic products.
- The injunction: Judge Lin blocks the ban. First and Fifth Amendment violations likely. APA overreach confirmed.
- The carveout: Anthropic engineers inside NSA. This position is untouched by the litigation, the ban, and the injunction simultaneously.
Judge Lin's preliminary injunction addresses the commercial procurement ban — the Hegseth designation that prevented civilian agencies and the Defense Department from purchasing Anthropic services. It operates under APA and First Amendment authority.
Intelligence community embeds operate under separate legal frameworks: FISA, Executive Order 12333, National Security Act authorities. A federal court injunction in commercial procurement litigation does not reach classified intelligence embeds unless the plaintiff specifically pleads those embeds — and the public pleadings in this case do not reflect a challenge to Project Glasswing or Mythos.
The architecture: the company that sued for its right to operate without government interference has engineers inside the agency with the most expansive domestic surveillance authority in the U.S. government. Both positions can be simultaneously true. They are.
The Timeline
- February 24, 2026 Pentagon ultimatum to Anthropic: strip safety guardrails or lose contracts. Amodei refuses.
- February 27, 2026 Hegseth issues government-wide Anthropic ban. Designated "national security supply chain risk."
- March 26, 2026 Judge Rita Lin (N.D. Cal.) issues 43-page ruling. Calls ban "Orwellian." Finds First Amendment retaliation, Fifth Amendment due process violation. Preliminary injunction granted. Injunction scope: commercial procurement ban only.
- April 2, 2026 Injunction operative. Pentagon procurement ban blocked.
- May 19, 2026 DC Circuit hears oral argument. Henderson: "spectacular overreach."
- June 5, 2026 Hegseth confirms Pentagon will not reconsider ban position. Ninth Circuit appeal pending. Glasswing/Mythos: ongoing.
- June 12, 2026 — HARD DEADLINE FISA Section 702 statutory expiry. Pulte (acting DNI) holds renewal authority. No national security experience. Appointed amid fabricated-charges controversies against Cook, James, Powell.
FISA Section 702 and the Pulte Problem
FISA Section 702 is the legal authority under which the NSA conducts warrantless surveillance of foreign targets whose communications transit U.S. networks. It is also the authority under which American communications are incidentally collected — and under which, in 2025, the NSA conducted 7,000-plus warrantless searches of Americans' data, a 34 percent increase from the prior year. Queries of political and religious organizations rose from 227 to 839 — a 3.7-times increase.
Section 702 expires June 12, 2026. The acting Director of National Intelligence holding renewal authority is a political appointee with no national security experience, confirmed amid documented controversies involving fabricated charges against Federal Reserve Chair Powell, Apple CEO Tim Cook, and FDIC Chair Martin Gruenberg.
The renewal question is binary: if 702 lapses, NSA loses its primary foreign intelligence collection authority. If 702 renews with Pulte in control, warrantless surveillance of Americans is authorized under an acting DNI the Senate Intelligence Committee has publicly questioned on competence grounds. There is no good outcome. The architecture does not wait for one.
"The American people are going to be stunned when they find out what has been done with this authority." — Sen. Ron Wyden, May 2026
The SpaceX Layer
NSPM-11, signed June 5, 2026, creates a multi-vendor mandate for AI in national security procurement. In practice, the primary infrastructure beneath OpenAI, Anthropic, and Google's government AI deployments is Colossus — the SpaceX compute cluster operating under a $920 million per month Google contract and a $1.25 billion per month Anthropic contract. Both contracts route compute through infrastructure controlled by the same person who controls federal database access via DOGE, who controls X Corp's data flows, and who just completed the largest IPO in U.S. history.
The NSPM-11 "multi-vendor mandate" creates the appearance of competition while routing all critical AI workloads through a single compute layer. The injunction that protects Anthropic's right to operate does not reach the compute infrastructure Anthropic runs on. The carveout that places Anthropic engineers inside the NSA does not appear in the injunction record. The SpaceX layer sits underneath all of it.
The Memphis Lease: SpaceX holds a Colossus AI cluster lease in Memphis with a 180-day mutual cancellation clause. Anthropic holds a sub-arrangement with a 90-day mutual cancel. If the injunction fails on appeal, Anthropic's ability to operate through the compute layer it depends on is subject to a 90-day cancellation by the entity whose principal the Pentagon wanted Anthropic to serve. The litigation does not address this dependency.
What the public knows: Anthropic refused Pentagon pressure. A federal judge called the resulting ban Orwellian. The injunction held. This is a constitutional victory.
What the public doesn't know: Anthropic engineers are inside the NSA under Project Glasswing/Mythos. The injunction's scope does not reach this embed. FISA 702 expires June 12 under an acting DNI with no national security background. The compute infrastructure Anthropic depends on is controlled by the same individual the Pentagon originally wanted Anthropic to serve.
What this means: The injunction wins the battle. The carveout, the compute dependency, and the 702 expiry define the terms of the war. The architecture does not wait for final verdicts. It operates in the space between them.
Project Glasswing and Mythos are classified program designations. Their existence is reported here on the basis of sources with knowledge of intelligence community contracting. The public record ends here. The FOIA request and the subpoena begin.