The Pentagon declared Anthropic a supply chain risk.

Not for a breach. Not for a foreign ownership issue. Because Anthropic refused to remove safety guardrails from Claude.

The DoD wanted autonomous weapons decisions and mass surveillance capability. Anthropic said no. Hegseth invoked supply chain risk designation -- a tool previously reserved for Huawei.

For CISOs: your AI vendor's safety commitments are now subject to government compulsion. That belongs in your TPRM framework.

OpenAI signed a deal the same night. Their safety carve-outs are contractual, not technical. Harder to audit. Worth knowing.