Anthropic Warns a Pentagon Fight Can Hit Private Clients

Anthropic told future shareholders that U.S. government hostility can damage commercial customers and partners, even though federal contracts are less than 1% of revenue. The warning sits in a confidential draft submitted on June 1, 2026, for a listing that could be valued at $2 trillion.

The draft does not treat Washington as a small client that might walk. It treats a federal label as something that can scare the private buyers who fund the company.

Less Than 1% of Revenue, and a Much Larger Shadow

On June 1, 2026, Anthropic, PBC confidentially submitted a draft registration statement on Form S-1 to the Securities and Exchange Commission. The public version is not out. The listing, if it happens, is expected after the November 2026 midterm elections and still depends on markets and the SEC review.

The prospectus says revenue from government agency contracts accounts for less than 1% of annual revenue. Direct federal work is not the business. Claude’s paid use inside companies is.

THE FEDERAL SLICE AGAINST THE COMMERCIAL BOOK

• Government share: Agency contracts are less than 1% of annual revenue, the prospectus says.
• 2025 sales: Revenue rose 12-fold to nearly $4.6 billion, with an operating loss of more than $8 billion.
• 2026 run-rate: Anthropic said run-rate revenue reached $14 billion on February 12, 2026, and surpassed $47 billion in May.
• Known awards: Four firms, including Anthropic, received Department of Defense awards of up to $200 million each in July 2025; the State Department’s 2026 award is $18,960.

The $200 million figure is a contract ceiling from 2025, not a statement of 2025 government sales. The prospectus still groups all agency contracts under 1%. That is why the risk section spends its energy on customers who never signed a federal order.

A Congressional brief on the Anthropic dispute makes the same point from the other side of the table. The $200 million award and the $18,960 State Department line are small beside the May run-rate of $47 billion. The harm Anthropic has claimed in court is that the government’s moves are “harming Anthropic irreparably,” which only makes sense if private clients and partners flinch.

Hegseth Ordered Military Partners Off Claude

The fight started as a contract argument, then jumped the fence. In February 2026, Anthropic refused to drop two limits on Claude: no use in fully autonomous weapons, and no mass domestic surveillance of Americans. The Pentagon wanted access for every lawful purpose.

On February 27, President Donald Trump directed federal agencies to stop using Anthropic’s technology and set a six-month phase-out for agencies already on Claude. Defense Secretary Pete Hegseth went further the same day. He said no contractor, supplier, or partner that does business with the U.S. military may conduct any commercial activity with Anthropic.

This week, Anthropic delivered a master class in arrogance and betrayal as well as a textbook case of how not to do business with the United States Government or the Pentagon.

Our position has never wavered and will never waver: the Department of War must have full, unrestricted…

— Secretary of War Pete Hegseth (@SecWar) February 27, 2026

That sentence is the spillover. It does not cut a Pentagon seat. It tells Lockheed-scale buyers, cloud resellers, and other vendors that keeping Claude for their own commercial work could collide with military business. Anthropic later said a supply-chain label under 10 U.S.C. §3252 can reach Claude on Defense Department contracts and cannot dictate how those same firms use Claude for other customers.

The General Services Administration followed the White House the same week, removing Anthropic from USAi.gov and from the Multiple Award Schedule that commercial firms use for long-term government-wide deals. Some defense contractors stopped using Claude. Others waited on the courts. Either way, the customer who mattered was no longer a contracting officer.

Ninety Minutes to Take Fable 5 Offline

June showed how fast a Washington order can hit people who never bought from the Pentagon. On June 9, 2026, Anthropic launched Claude Fable 5 for general use and Claude Mythos 5 for a small group of cyber defenders through Project Glasswing. On June 12, the Commerce Department required the company to keep both models away from any foreign national, in the United States or abroad, including Anthropic’s own foreign-national staff.

The letter arrived at 5:21 p.m. Eastern. Anthropic said it had no reliable way to check nationality in real time, so it chose to disable Fable 5 and Mythos 5 for all customers. Other Claude models stayed up. The company said it believed the order grew from a jailbreak write-up, that the demonstrated trick found a few already known minor flaws, and that similar capability was already on the market. It complied, and it also said a narrow jailbreak should not recall a commercial model used by hundreds of millions of people.

THE JUNE FREEZE, DAY BY DAY

1. June 12, 2026: Commerce imposes export controls on Fable 5 and Mythos 5; Anthropic takes both models down for every customer.
2. June 26, 2026: Commerce permits a partial restore of Mythos 5 for some U.S. clients after Anthropic agrees to extra safeguards and future-release protocols.
3. June 30, 2026: The export controls are lifted.
4. July 1, 2026: Fable 5 returns on Claude’s own products, with cloud marketplaces to follow; Mythos 5 stays limited to approved U.S. organizations.

The prospectus cites that episode as a thing that can happen again. Temporary or not, the company said such steps can bring “significant reputational harm, including adverse media coverage, public scrutiny, and negative perceptions among existing and prospective customers, partners, employees, and investors,” whatever the final result.

Two Courts Split on the Same Pentagon Label

The Pentagon did not pick one statute. It used two, so Anthropic filed two cases on March 9, 2026. A judge in San Francisco issued a preliminary injunction on March 26 that paused the broader sweep and the president’s cease order. GSA put Anthropic back on USAi.gov and the schedule. In August, that court vacated the designation issued under 10 U.S.C. §3252.

The other track went to the U.S. Court of Appeals for the D.C. Circuit under the Federal Acquisition Supply Chain Security Act of 2018. The court denied a stay on April 8. On September 25, a 2-1 panel kept the label in place.

THE TWO SUPPLY-CHAIN CASES

Judge Gregory Katsas, joined by Judge Neomi Rao, wrote that the department had ample support for concluding that keeping Claude in its systems, or in its contractors’ systems, presented a covered national-security risk. The opinion pointed to Anthropic’s own encoded limits, to government users who had already been refused, and to a fight over an overseas operation that left the department unsure whether Claude would do the work.

Judge Karen LeCraft Henderson dissented. An Anthropic spokesperson said the company “respectfully disagree[s]” with the ruling, noted that another federal court had already held the parallel designation unlawful, and said Anthropic is considering all options, including further review. The practical split is ugly for a company about to sell stock. California blocked the widest reading of the ban. The D.C. Circuit still lets the Pentagon keep Claude off military work and off contractors’ Defense Department work.

What the S-1 Puts in Front of Public Investors

Risk factors take nearly a third of the prospectus, more pages than Anthropic used to describe the business. Buried in that pile is the government-attitude warning, and it sits next to plainer concentration problems that make a scare story expensive.

WHERE A SCARE WOULD LAND FIRST

• Two buyers: Two unnamed customers each accounted for 12% of 2025 revenue, and many large clients are not on long-term contracts.
• Cloud rails: Amazon and Google carried 47% of 2025 sales, about $2.16 billion, and also supply compute while competing in AI.
• Locked spend: The filing lists $518 billion of cloud, compute, and infrastructure obligations, about 80% of it payable even if usage falls short.
• Second-quarter pace: Revenue in the second quarter of 2026 reached $11.5 billion, against nearly $4.6 billion for all of 2025.

A company growing that fast can absorb a cancelled federal seat. It cannot shrug off a week in which its newest models disappear for every customer, or a headline that tells every defense-adjacent buyer to drop the vendor. The May 2026 Series H raised $65 billion at a $965 billion valuation. A $2 trillion listing would be more than double that mark, which is why a risk factor about Washington is no longer a paragraph for lawyers.

The company may experience material revenue losses or business disruptions attributable to these events.

Anthropic, confidential IPO prospectus

The filing also repeats Anthropic’s long-running warning that advanced models could pose catastrophic or existential risks, including self-preserving behavior. That language is aimed at the product. The government section is aimed at the sales force.

Sunday Dinner Left the Blacklist Intact

Dario Amodei, Anthropic’s chief executive, has argued that labs should slow the rate at which they raise model capability so safety work can keep up. Trump has rejected that frame. Before the two men sat down, he said he was “for let’s go and let’s win,” put the U.S. lead over China at about a year to a year and a half, and said no country sits in third place.

They had their first one-on-one dinner at the White House on September 27, 2026, two days after the D.C. Circuit ruling. Trump had invited Amodei after the Anthropic chief missed a state dinner. The White House released no readout. A meal can reopen a channel. It does not rewrite a 2-1 opinion, and it does not strike a risk factor from a draft S-1.

Hegseth’s February post is still the clearest statement of the administration’s position: full lawful access, or a supply-chain label. Anthropic’s public position is still the two limits. Until one of those moves, IPO buyers are being asked to underwrite a company whose largest remaining Washington problem is not a cancelled invoice. It is the chance that the next order looks like June 12, or that a contractor reads Hegseth’s words and dumps Claude to keep a military account.

Barclays Is Still Rolling Claude Through the Bank

The commercial book has not frozen. On October 1, 2026, Anthropic said Barclays is expanding Claude across the bank and expects Claude Code to reach 50% of its developer population by the end of 2026. That is a private-sector deployment announced after the D.C. Circuit loss and after the prospectus language on government attitudes was already in circulation.

It does not cancel the warning. It shows why the warning is written the way it is. The customers who can move the $2 trillion math are banks, consultancies, and cloud buyers, not the State Department’s $18,960 line. A Pentagon label that never shows up in the revenue mix can still show up in a renewal meeting.

The draft remains confidential. The Pentagon label remains in force on the D.C. Circuit track. The newest named customer in Anthropic’s own newsroom is still a bank, not an agency.

Disclaimer: This article is news reporting and analysis of Anthropic’s confidential IPO disclosures and related government actions. It is informational only and is not investment advice, a solicitation to buy or sell securities, or a recommendation on Anthropic or any other company. Readers should consult a licensed financial adviser or securities lawyer before making any decision about private shares, an IPO allocation, or public-market trading. Figures, court outcomes, and listing plans reflect the cited sources and may change as the SEC review, the litigation, and the offering process continue.