Browse Cases

Why It Matters: The proposed "expressive intermediary" framework is the brief's most significant doctrinal contribution: if adopted, it would substantially constrain Executive Branch flexibility to impose use-case conditions on AI vendors as a matter of procurement policy, extending the major-questions canon into First Amendment coercion doctrine in a way no appellate court has yet done. The indirect-coercion argument under *Vullo* is more conventionally grounded but still represents a meaningful extension, as *Vullo* itself did not address the government's broad contracting authority or national-security procurement contexts. The brief's central weakness—one worth watching as the government prepares its opposition—is its complete silence on *Rust v. Sullivan* and the government's likely argument that supply-chain risk conditions in AI-weapons procurement reflect genuinely viewpoint-neutral national-security equities, a gap that could prove decisive at summary judgment.

Why It Matters: The federal government has increasingly used procurement leverage and supply chain designation authority as tools of industrial and ideological policy, and this brief argues that when a company's publicly stated values — rather than a genuine security threat — drive such a designation, the First Amendment is triggered and the government loses. If the court accepts the amici's framing, it would be the first ruling to squarely hold that AI model safety architecture is constitutionally protected expression, creating a significant structural limit on the government's ability to use contract conditions to compel AI companies to build less cautious or differently aligned systems. For non-specialists, the core question is whether the Constitution forbids the government from telling an AI company "change how your AI thinks or lose all your federal contracts." The most closely watched doctrinal uncertainty is whether *Moody* and *NetChoice* — both of which addressed platforms *curating* pre-existing third-party content — extend to a model that *generates* outputs through training, a distinction no circuit court has yet resolved. The outcome could also determine whether retaliation doctrine places meaningful limits on the executive branch's use of national security procurement tools as instruments of pressure against private technology companies.

Why It Matters: The most doctrinally significant argument in this brief is the narrowest one: the ultra vires claim that § 3252's designation authority is agency-specific and cannot support a government-wide contracting ban offers the Court a path to rule for Anthropic without reaching either the First Amendment or non-delegation questions, which would leave both as unresolved and potentially high-stakes open issues. If a court does reach the First Amendment theory, the result could set meaningful precedent on how far the government may leverage its procurement power against contractors who engage in public political speech — a question courts have not had to answer in the national-security procurement context. The non-delegation argument faces a genuinely uncertain doctrinal landscape given *Gundy*'s fractured outcome, but the combination of all three theories gives Anthropic multiple independent grounds for summary judgment, increasing the likelihood that at least one survives to judgment.

Why It Matters: This brief is worth watching because it asks courts to extend *303 Creative*'s compelled-speech protection — designed for an individual sole proprietor's custom expressive services — to a large corporate entity's standardized AI product-use restrictions, a doctrinal step no circuit court has clearly authorized and one that could significantly reshape how First Amendment and RFRA protections apply to AI developers at scale. The RFRA argument is also novel in posture: applying the substantial-burden framework to a government procurement exclusion rather than a traditional licensing or benefits condition tests the outer boundary of *Hobby Lobby*'s already expansive reading of corporate religious exercise. If any court were to accept these arguments, it would create a powerful new legal tool for technology companies seeking to resist government compulsion to deploy their products for military or surveillance purposes — with implications reaching well beyond this case.

Why It Matters: This case presents a direct application of the government-coercion/retaliation doctrine — rooted in Bantam Books, Backpage v. Dart, and NRA v. Vullo — to an AI developer being punished by the Executive Branch for its expressed views on AI safety policy, extending the jawboning framework beyond platform moderation contexts to government contracting retaliation against a major AI company. If the court grants the injunction, it will be a significant precedent establishing First Amendment limits on the government's use of procurement and supply-chain authority to punish AI companies for their public policy positions and product design choices.

Why It Matters: This filing suggests Anthropic is advancing a jawboning or compelled-speech theory — that government threats to commandeer its AI technology to override the company's own usage restrictions constitute unconstitutional coercion — which, if accepted, could establish significant precedent delimiting the government's ability to conscript private AI systems for military or surveillance purposes against a developer's stated objections.

Why It Matters: This case presents a novel question of whether the government can use its contracting power to coerce an AI developer into removing self-imposed safety restrictions on a deployed model, potentially setting precedent on both unconstitutional conditions doctrine as applied to AI policy restrictions and the extent to which an AI company's usage policies constitute protected editorial or expressive conduct under the First Amendment.

Why It Matters: This case presents the first known attempt to deploy federal supply-chain risk management authority against a domestic AI company's safety architecture, and the court's resolution will define whether § 4713 can reach commercially transparent design choices or is confined to covert foreign-tampering threats — a question with immediate consequences for every AI vendor in the defense industrial base. The government's broad "any person" statutory construction, if accepted, would give national-security agencies sweeping authority to exclude AI firms whose models decline certain task categories, effectively converting safety-by-design into a procurement liability. Two doctrinal fault lines are particularly worth watching: whether the D.C. Circuit accepts the government's *Webster v. Doe* unreviewability analogy for urgency determinations — a position most observers regard as a significant stretch — and whether the court requires the government to address the due process implications of excluding a contractor from already-integrated existing systems, a gap the brief conspicuously leaves open.

Why It Matters: This brief pushes the D.C. Circuit toward a significant and unresolved doctrinal question: whether the First Amendment protects not just a developer's written governance documents — which fit comfortably within existing editorial-judgment precedent — but also the design choices embedded in an AI system itself. The retaliation theory, grounded in publicly documented government hostility toward Anthropic's expressed values, is the brief's most legally orthodox argument and tracks the *Vullo* playbook closely enough to warrant serious merits attention. If the D.C. Circuit reaches the AI-expression question, whatever it says will carry substantial weight in future disputes over government leverage over AI developers' product decisions — a dynamic that extends well beyond the procurement context.

Why It Matters: This case tests whether courts will apply standard APA arbitrary-and-capricious review — including its requirement that agencies follow their own statutory sequence and engage with contrary factual evidence — to national-security procurement decisions that agencies have historically shielded from meaningful judicial scrutiny. The procedural-inversion argument, if accepted, would establish that even the § 4713 emergency carve-out has real limits when the record reflects self-induced urgency, a holding with broad implications for how agencies invoke national-security exigencies to bypass procedural requirements. The First Amendment retaliation theory is the brief's most novel and contested contribution: if the D.C. Circuit reaches it, the case could clarify whether *Vullo*'s government-coercion framework extends to procurement exclusions where agency officials have publicly disparaged a contractor's expressive advocacy, a question with significant consequences for AI companies whose public policy positions increasingly put them in tension with government clients.

Why It Matters: This brief is worth watching primarily because of its unconstitutional conditions framing: by grounding the First Amendment claim in the government-wide scope of the ban rather than the original contract dispute, TPAF gives the D.C. Circuit a doctrinal hook — rooted in *Alliance for Open Society* rather than the more government-favorable *Rust v. Sullivan* — that does not require the court to resolve whether an AI company's values statements and its product functionality are legally separable. That question is genuinely open: no court has squarely addressed whether a national-security procurement statute can support a cross-agency blacklist when the designated "risk" is a contractor's public advocacy about permissible uses of its own technology. The statutory misapplication argument, while creative, turns on whether courts will read § 4713's supply-chain-risk authority as limited to intentional adversarial actors — a reading the government can contest — making the First Amendment theory the stronger vehicle for Petitioner's relief.

Why It Matters: This case presents a potentially novel question of whether FASCSA's national-security supply-chain designation authority—previously applied only to foreign entities—can be used against a domestic AI contractor, and whether such use triggers First Amendment scrutiny as government-compelled alteration of an expressive AI product or retaliation for a company's negotiating position, which could significantly constrain executive procurement power over AI developers.

Why It Matters: This case sits at the frontier of a rapidly developing conflict over whether the government may use investigative or regulatory pressure to punish researchers and civil society groups for influencing how platforms moderate content — a question the Supreme Court skirted rather than resolved in *Murthy v. Missouri* last term. A ruling granting even interim relief could constrain the current administration's ability to deploy such pressure against academics and NGOs who study or critique platform content decisions, making the preliminary injunction proceeding consequential well beyond the parties before the court. EFF's brief also implicitly surfaces two unresolved doctrinal questions: whether civil society actors engaged in advocacy-to-intermediaries hold cognizable First Amendment retaliation claims, and whether *Moody*'s recognition of platform editorial rights generates derivative injury for third parties whose work informs that editorial discretion. The brief's most significant vulnerability is its failure to engage *Murthy*, which erected substantial standing and traceability barriers that the Coalition plaintiffs must clear and that the government is virtually certain to invoke in opposition.

Why It Matters: No court has clearly resolved what constitutional status attaches to the ecosystem of civil society intermediaries — researchers, NGOs, platform accountability groups — when the government uses administrative tools, funding threats, or public condemnation to pressure or penalize them for their work on platform governance. If a court credits EFF's framing, even in dictum, it could establish a meaningful precedential foothold limiting the government's ability to chill independent technology research through means short of direct censorship. The case also sits at a relatively uncharted intersection of APA Section 705 stay doctrine and First Amendment injury, and could generate useful law on what constitutes irreparable harm in speech-chilling contexts under the APA. The brief is most significant not for the questions it answers, but for the ones it forces a federal court to confront directly.