The Line They Drew and What Crossed It Anyway

On February 24, 2026, the Pentagon sent Anthropic an ultimatum. Remove the two restrictions preventing the military from using Claude for warrantless mass surveillance of Americans and fully autonomous weapons deployment, or lose the contract.

Anthropic's CEO Dario Amodei refused. Three days later, President Trump issued a government-wide ban on all federal agencies using Anthropic's technology. Defense Secretary Pete Hegseth designated the company a national security supply chain risk — a designation previously reserved exclusively for foreign adversaries.

Anthropic sued.

On March 26, 2026, U.S. District Judge Rita Lin issued a 43-page ruling. She called the administration's moves "Orwellian." She found them likely to constitute First Amendment retaliation, Fifth Amendment due process violation, and arbitrary and capricious abuse of administrative authority. She granted a preliminary injunction blocking enforcement. She wrote that the government's actions "appear designed to punish Anthropic" and could "cripple" the company.

That injunction is still in effect. The Ninth Circuit appeal is still pending. The DC Circuit heard oral argument on May 19, 2026, and a ruling is still pending.

Pete Hegseth confirmed on June 5, 2026 — yesterday — that the Pentagon will not back down. Case Record →

"Punishing Anthropic for bringing public scrutiny to the government's contracting position is classic illegal First Amendment retaliation." — Judge Rita Lin, March 26, 2026

This dispatch is about what happened next. Because while the lawsuit was being litigated, the line Anthropic drew was crossed anyway. Just from a different direction.

I. What the Court Confirmed

The legal record established by Judge Lin's ruling is the foundation of what follows. This is not inference. These are findings made by a federal court on a developed record.

The Pentagon wanted Claude available for all lawful purposes. Anthropic refused two specific categories: warrantless mass surveillance of Americans, and fully autonomous weapons deployed before human accountability could be assured. These were Anthropic's terms of service, not novel demands.

The court found the government had no statutory authority for the Presidential Directive. Neither Trump nor Hegseth cited any legal basis for their actions. The day before the designation was finalized — and before it was communicated to Anthropic — the Pentagon's own Under Secretary exchanged cordial drafts of Anthropic's usage terms with Amodei, writing that they were "very close." Within 24 hours, Anthropic was classified alongside sanctioned foreign telecommunications companies as a threat to American national security.

In court, government lawyers conceded they had no evidence for the justification they had cited. The judge found the administration's stated national security rationale was directed not at genuine security interests but at punishing a company for its stated position on AI safety.

The DC Circuit panel that heard oral argument on May 19 included a George H.W. Bush appointee who called the Pentagon's actions "a spectacular overreach by the Department." Even the Trump-appointed judge on the panel questioned the Pentagon's legal basis. A ruling has not yet issued. When it does, this dispatch will be updated.

II. The Line, and What Crossed It

Here is what nobody has fully assembled in a single dispatch.

While Anthropic was in federal court arguing that the government cannot compel AI companies to enable warrantless mass surveillance, Anthropic engineers were embedded inside the National Security Agency conducting offensive cyber operations.

This is confirmed. The arrangement uses Anthropic's Mythos AI model — a restricted-access system deployed through Project Glasswing, launched April 7, 2026. The NSA arrangement was explicitly carved out from both the Pentagon ban and the ongoing litigation. It is operating in parallel to the lawsuit. The company that refused domestic mass surveillance drew a line — and simultaneously has engineers inside one of the most powerful surveillance agencies in the world, working on offensive cyber operations, under terms that the litigation does not touch.

The series is not claiming this is a contradiction Anthropic made in bad faith. The distinction they drew is real and legally significant: domestic mass surveillance of American citizens is categorically different from offensive cyber operations targeting foreign adversaries. These are different programs, different statutes, different constitutional frameworks.

What the series is documenting is that the architecture has a seam. And the seam is exactly where the legal line was drawn.

III. FISA, Section 702, and the Six-Day Clock

Section 702 of the Foreign Intelligence Surveillance Act expires in six days.

This is the legal authority that enables warrantless backdoor searches of Americans' communications. It was designed for foreign intelligence collection. Its transformation into a domestic surveillance tool happened through a mechanism called a backdoor query: if an American communicates with a foreign surveillance target, their side of the conversation is collected, and can be searched without a warrant.

In 2025, the FBI conducted more than 7,000 such warrantless searches of Americans' communications — a 34 percent increase over the prior year. The Privacy and Civil Liberties Oversight Board found that FBI queries targeting political, religious, and media organizations surged from 227 in 2024 to 839 in 2025. Nearly four times in a single year.

The man who will control this authority after reauthorization — if it is reauthorized — is William Pulte, the new Director of National Intelligence. Pulte simultaneously heads the Federal Housing Finance Agency, overseeing more than ten trillion dollars in mortgage markets. He has no prior national security experience. Federal law requires extensive national security expertise for the DNI role.

Pulte's documented behavioral pattern: fabricated fraud charges against Federal Reserve Board Member Lisa Cook, New York Attorney General Letitia James, and Federal Reserve Chair Jerome Powell. His public ally Jack Posobiec called on him to "start digging in on the domestic side of terrorism." The GAO is investigating Pulte's use of FHFA authority. Suspects →

"When the government declassifies what I have been concerned about for years, I believe the American people are going to be stunned." — Senator Ron Wyden, April 2026

Wyden has reviewed the classified record. He cannot say what it contains. He has said he believes it will stun Americans when it is eventually released.

The reauthorization decision arrives in six days. The DC Circuit ruling on the Anthropic case has not yet arrived. Schedule F stripped 10,000 career civil servants of protection on June 5 — yesterday. The institutional checks that would slow the architecture are being removed in real time, in the same week the legal decision that defines its boundaries is still being written.

IV. Three Pillars of the Same Structure

The March dispatch in this series described three converging elements. They have each advanced since March.

V. What Judge Lin Found, and What It Means Now

The 43-page ruling is the most important document in this series that no general audience publication has connected to the FISA reauthorization fight, the NSPM-11 signing, and the Pulte DNI appointment simultaneously.

Judge Lin found that Anthropic is likely to succeed on the merits of all three legal theories: First Amendment retaliation, Fifth Amendment due process violation, and Administrative Procedure Act statutory excess. She found the government's stated national security rationale was not directed at genuine security interests. She called the administration's moves Orwellian and said they could cripple the company. She found that the government went further than simply choosing a different vendor — it deployed a designation meant for foreign adversaries against an American company that said no to domestic surveillance. Full Case Record →

The significance for what follows: if the courts ultimately find that the government violated the First and Fifth Amendments by retaliating against a company for refusing to build domestic surveillance AI, then every subsequent contract with companies that made no such refusal — for "all lawful purposes" — sits on top of a constitutional finding that the purpose driving those contracts was illegal to compel.

The cases are still being litigated. No final verdict has issued. This is an inference from a preliminary finding, not a final judgment.

But the architecture does not wait for final verdicts. NSPM-11 is signed. The AI is deployed. The surveillance authority expires in six days. The man who will hold it has a documented pattern of fabricating charges against people he considers political opponents.

The court found the government went further. The question this dispatch is asking is: how much further is further, and who is watching the watchers?

VI. The Six-Day Window

June 12 is the operative deadline for this dispatch.

If FISA Section 702 lapses: the United States loses warrantless collection authority on foreign adversaries operating outside the country. This is a genuine national security cost. Intelligence agencies have made this argument for years, and they are not wrong about what lapses.

If FISA Section 702 is reauthorized: the 7,000 warrantless searches of Americans per year continue. The data broker loophole continues. The fourfold surge in queries targeting political and religious organizations continues. Pulte holds the authority. NSPM-11-mandated AI is the scale mechanism. The infrastructure Anthropic refused to build is assembled from the components that remained.

Congress is the deciding institution. The coalition that passed Take It Down 409 to 2 — to protect two teenagers from AI-generated abuse imagery — is the same coalition that could attach warrant requirements and data broker restrictions to reauthorization. That coalition exists. It has not yet won.

Two things can be simultaneously true: the foreign intelligence collection authority is genuinely necessary, and the domestic application of the same legal mechanism, scaled by AI, administered by a man with Pulte's documented behavioral pattern, without warrant requirements, is a different thing than what Section 702 was designed to be.

The March dispatch asked what happens when the same architecture that protected Elliston Berry and Francesca Mani — two teenagers who walked into Congress and moved it — is turned in a different direction.

This dispatch has an updated answer. The architecture does not choose its direction. The people holding it do. And the decision about who holds it, with what constraints, expires in six days.

---

---