Why Anthropic denied the Pentagon full access to its AI—in this war or any other
As you read this, the United States and Israel are bombing Iran. Operation Epic Fury. Operation Roaring Lion. Khamenei is dead. Iranian missiles are striking Israel and American bases across the Gulf. It is the largest U.S. military operation in the Middle East since the 2003 invasion of Iraq. And there is a question no one is asking: what artificial intelligence is processing targeting data on the Pentagon’s classified networks right now? Because the one that was doing it was expelled 24 hours before the bombs started falling.
Claude, built by Anthropic, was the only AI model approved to operate on the Pentagon’s classified systems. It was already inside, integrated through Palantir, the Silicon Valley giant that serves as the digital infrastructure of modern American warfare. It had been there since 2024. The dispute was never about deploying Claude. It was about what Claude was allowed to refuse. And with the largest military operation in two decades about to launch, the Pentagon had an AI on its most sensitive networks that possessed the capacity to say no.
On Friday, February 27, at 5:01 p.m., the deadline expired. Anthropic would not remove two restrictions: no mass domestic surveillance of Americans, and no fully autonomous weapons without human oversight. President Trump ordered every federal agency to immediately cease using Anthropic’s technology. Defense Secretary Pete Hegseth designated the company a supply chain risk, a classification historically reserved for foreign adversaries like Huawei. On Saturday, the bombing began. Hours later, OpenAI signed a deal with the Pentagon. Sam Altman announced that the agreement included the exact same two restrictions Anthropic had demanded. The Pentagon accepted from OpenAI what it had punished Anthropic for requesting.
The press framed this as a contract dispute. It was not.
On February 24, Defense Secretary Hegseth delivered a formal demand to Anthropic CEO Dario Amodei: remove all usage restrictions and grant the Pentagon access to Claude “for all lawful purposes,” without exceptions. The consequences for refusal were explicit. Termination of the $200 million defense contract. Designation as a supply chain risk to national security, which would bar every military contractor in the country from doing business with Anthropic. And the potential invocation of the Defense Production Act of 1950, a wartime statute that would allow the government to compel access to the technology by force.
Anthropic’s response was equally clear. The company said it supported all lawful uses of AI for national security with two narrow exceptions: Claude could not be used for the mass surveillance of American citizens, and it could not operate fully autonomous weapons systems without a human in the decision chain. To the best of Anthropic’s knowledge, these two exceptions had not affected a single government mission to date.
The Pentagon’s position was that these restrictions were ideological, not technical, and that no private company should hold veto power over the operational decisions of the United States military. Hegseth accused Anthropic of a “cowardly act of corporate virtue-signaling” and of trying to “strong-arm the United States military into submission. Amodei replied that he could not “in good conscience” accede to the Pentagon’s request. He acknowledged that the Department of War has every right to choose its partners, but added: “In a narrow set of cases, we believe AI can undermine, rather than defend, democratic values.”
Neither side moved. The clock ran out.
How the relationship collapsed
The partnership had not always been adversarial. In 2024, Anthropic embedded Claude into classified networks through Palantir, and the arrangement worked. By July 2025, the Pentagon signed the $200 million contract, fully aware of Anthropic’s usage restrictions. Claude was deployed at national nuclear laboratories, used for intelligence analysis, and integrated into the Department of War’s operations. It was the only frontier AI model operating in the military’s most sensitive environments.
The fracture began with Venezuela. In........
