The D.C. Circuit is protecting Donald Trump’s ability to use the national security apparatus to punish any tech company that dares question his administration’s lethal war-fighting AI programs. The Pentagon is branding safety critics as security threats to destroy any remaining constraint on AI warfare, and the appellate court is providing the procedural machinery—opaque classified proceedings, high-level deferential review—to make the retaliation stick. The judiciary acts as the silent conspirator, converting policy disagreements over autonomous weapons into binding administrative designations shielded from merits-based accountability.
The administration’s statutory justification, documented in its spring docket filings, requires demonstrated supply-chain compromise; the Pentagon has produced instead a policy-driven campaign against a private firm that refuses to deploy unguarded military AI. Judge Karen LeCraft Henderson, a George H. W. Bush appointee, dismantled that evidentiary posture Tuesday without sustained challenge. “To me, this is just a spectacular overreach by the Department,” she said, identifying zero factual support for the claim that Anthropic occupies a critical vulnerability. Her words land with the hollow weight of a warning that will not become a ruling—the structural reality of a regime in which the judiciary operates on a “national security” exception that swallows the law.
As we have seen in previous installments of this administrative pattern, including the Pentagon’s ongoing and largely successful effort to avoid judicial oversight of its AI ethics-labeling, the strategy remains consistent: label the target a national security risk and watch as the courts defer, defer, and defer again. The security label functions not as supply-chain protection but as a financial and operational threat designed to force corporate capitulation on moral and technical objections to autonomous warfare. The executive lacks the statutory authority to convert technical dissent into a binding national-security risk without evidentiary grounding, yet the administration’s appeal strategy relies entirely on expanding administrative discretion. Henderson’s observation that the record contains zero evidence exposes that reliance as a statutory overreach, not a legitimate security posture.
The appellate court’s own jurisprudence has guaranteed this outcome. By relying on expansive interpretations of statutory procurement immunity and enforcing a deeply deferential review posture under 10 U.S.C. § 2551, the judiciary has effectively invited the executive to use “national security” as a get-out-of-accountability-free card. The administrative state does not need to win on the merits; it only needs to trigger the national-security deference mechanism and wait for the legal system to exhaust the challenger. The court system is not resolving a dispute; it is managing the Pentagon’s retaliation campaign with the methodical silence that opaque classified-appellate proceedings demand.
If the D.C. Circuit eventually upholds the Pentagon’s defiance, it will confirm what the record already makes clear: the administrative state has successfully captured the very institutions charged with checking it. The national security label is the shield, and the Court is the soldier holding it.