Reference matrix for AI provider military use policies. Updated February 28, 2026.


Quick Reference

ProviderMilitary UseDefense ContractsPolicy StabilityRisk Level
Anthropic๐Ÿ”ด Blacklisted โ€” supply chain risk designation Feb 27$200M DOD (at risk)๐Ÿ”ด Blacklisted โ€” legal challenge pendingCRITICAL
OpenAI๐ŸŸข Classified network deal signed โ€” redlines acceptedAnduril, DOD $200M+๐ŸŸข StableLOW
Google๐ŸŸข Allowed โ€” no API restrictionsMultiple partnerships๐ŸŸข StableLOW-MEDIUM
Meta๐ŸŸข Allowed โ€” Llama license permitsUnknown๐ŸŸข StableLOW
xAI/Grok๐ŸŸข Explicitly cooperatingNegotiating๐ŸŸข StableLOW
Kimi๐ŸŸข Allowed โ€” no restrictions foundNone known๐ŸŸข StableLOW
Mistral๐ŸŸข Allowed โ€” no prohibitionNone known๐ŸŸข StableLOW

Legend: ๐ŸŸข Low risk | ๐ŸŸก Medium risk | ๐Ÿ”ด High risk | ๐Ÿ”ด CRITICAL = active government action


February 2026 Outcome

The Anthropic-DOD confrontation resolved on February 27 โ€” with a sequence of events that exposed a deep contradiction in the government’s position.

February 27, 2026 โ€” Anthropic blacklisted: Anthropic did not comply with the deadline. Trump ordered all federal agencies to cease using Anthropic’s products. Defense Secretary Hegseth formally designated Anthropic a supply chain risk โ€” believed to be the first American company to receive the designation, normally reserved for foreign adversaries. Military contractors were barred from commercial activity with Anthropic; a 6-month transition period was granted.

Anthropic’s response called the designation “legally unsound” and pledged a court challenge.

February 27, 2026 (hours later) โ€” OpenAI signed a deal with the same redlines: Sam Altman announced OpenAI had reached a classified network agreement with the DOD, publishing the same two safety limits Anthropic was blacklisted for insisting upon:

“Two of our most important safety principles are prohibitions on domestic mass surveillance and human responsibility for the use of force, including for autonomous weapon systems. The DoW agrees with these principles, reflects them in law and policy, and we put them into our agreement.”

The DOD accepted from OpenAI what it refused to accept from Anthropic.

Full coverage: /posts/anthropic-dod-pressure-2026/


Provider Details

Anthropic

Status: ๐Ÿ”ด Blacklisted โ€” Supply Chain Risk Designation Active

What happened: Formally designated a supply chain risk to national security by Hegseth on February 27, 2026. Trump simultaneously ordered all federal agencies to cease using Anthropic products. Military contractors barred from commercial activity with Anthropic immediately. Six-month transition period granted.

Anthropic’s two redlines (held throughout):

  • No mass domestic surveillance
  • No fully autonomous weapons / lethal missions without human control

Anthropic legal challenge: Vowed court challenge; calls designation “legally unsound” and “a dangerous precedent for any American company that negotiates with the government.” Argues Hegseth’s authority extends only to Pentagon contractor relationships, not all commercial activity.

Defense Relationships at risk:

  • $200M DOD contract
  • Palantir partnership โ€” Claude was previously the sole model cleared for classified missions
  • Deployed in January 2026 Maduro capture operation

Historical first: First American company to receive the supply chain risk designation โ€” previously applied only to foreign adversaries.

Policy Stability: ๐Ÿ”ด Blacklisted โ€” legal challenge in progress

Context:


OpenAI

Status: ๐ŸŸข Classified network deal signed โ€” safety redlines accepted by DOD

What happened: On February 27, 2026, Sam Altman announced a deal to deploy OpenAI models in the DOD’s classified network. The deal explicitly includes the same two safety limits Anthropic was blacklisted for insisting upon โ€” prohibitions on domestic mass surveillance and human responsibility for use of force / autonomous weapons.

Altman’s stated terms (X post, Feb 27, 2026):

“Two of our most important safety principles are prohibitions on domestic mass surveillance and human responsibility for the use of force, including for autonomous weapon systems. The DoW agrees with these principles, reflects them in law and policy, and we put them into our agreement.”

Policy:

  • No domestic mass surveillance
  • Human responsibility for use of force and autonomous weapon systems
  • Both embedded in the DOD agreement text per Altman

Defense Engagement:

  • Classified network deployment (announced Feb 27, 2026)
  • Anduril partnership
  • Previous $200M DOD contract (non-classified)
  • Feb 27 announcement bundled with $110B funding round ($840B post-money valuation โ€” largest venture deal ever recorded)

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸข Low

Reference: /verify/openclaw-openai-policy/


Google

Status: ๐ŸŸข Allowed

Policy: Gemini API terms contain no military restrictions. Focus on acceptable use (abuse, CSAM) rather than domain limits.

Defense Engagement:

  • Negotiating with Pentagon per FT
  • Historical defense sector partnerships
  • Cloud/Vertex AI enterprise pathway

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸก Low-Medium โ€” platform risk remains

Reference: /verify/openclaw-google-policy/


Meta

Status: ๐ŸŸข Allowed

Policy: Llama licenses permit most uses including commercial and military. Acceptable Use Policy focuses on illegal activities, not domains.

Advantages:

  • Open-weight releases reduce vendor lock-in
  • Self-hostable โ€” no API dependency
  • Published, consistent license terms

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸข Low


xAI/Grok

Status: ๐ŸŸข Explicitly Cooperating

Evidence:

“Musk’s Grok ‘is on board with being used in a classified setting, while the rest of the companies are close.’” โ€” Senior Pentagon official (via FT, Feb 25, 2026)

Context:

  • Musk defense relationships via SpaceX
  • Trump AI tsar David Sacks is “good friend” with Musk
  • Positioning for defense contracts

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸข Low


Kimi (Moonshot AI)

Status: ๐ŸŸข Allowed

Policy: No military use restrictions found in platform terms.

Considerations:

  • 8x cheaper than Claude ($3/1M vs $25/1M tokens)
  • Open weights available
  • No US political pressure

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸข Low


Mistral

Status: ๐ŸŸข Allowed

Policy: No military restrictions in terms. EU-based provider.

Features:

  • Explicit MCP (Model Context Protocol) support
  • BYOK (Bring Your Own Key) friendly
  • Different regulatory framework

Policy Stability: ๐ŸŸข Stable

Risk Level: ๐ŸŸข Low


Recommendations by Use Case

Defense Contractors

NeedProviderRationale
Immediate deploymentOpenAI, GoogleStable, no restrictions, enterprise ready
Cost optimizationKimi k2.58x cheaper, no restrictions
European complianceMistralEU-based, different framework
Open-sourceMeta LlamaSelf-hostable, no vendor lock-in

Researchers

NeedProviderRationale
Policy studyAnthropicObserving negotiation outcomes
Consistent accessOpenAINo policy volatility
Low budgetKimi, GoogleFree tiers available

Enterprises

NeedProviderRationale
Risk mitigationMulti-providerAvoid single-vendor dependency
Classified workloadsOpenAI, Google, xAIPentagon negotiations in progress
Long-term stabilityOpenAI, MetaProven track record

Monitoring Policy Changes

SignalSourceFrequency
Terms updatesProvider legal pagesWeekly
Official statementsX/Twitter, blogsDaily
EnforcementGitHub issues, forumsOngoing
DOD announcementsdefense.govAs published
Legislationcongress.govAs published

Alert setup: Google Alerts for “[Provider] military use policy”


Defense Production Act Implications

If invoked against Anthropic:

  • Legal compulsion without consent
  • Potential Anthropic legal challenge
  • Sets precedent for AI provider compulsion

Historical DPA usage:

  • COVID-19 medical supplies (Trump/Biden)
  • Critical mineral production (Trump)

Breaking Coverage:

Provider Policies:

Anthropic Context:


Verification Ledger

โœ… VERIFIED: High Evidence

Hegseth deadline (Feb 25)

  • Source: Financial Times, Feb 25, 2026
  • Quote: “Anthropic had until 5.01pm on Friday ’to get on board or not’”

Anthropic supply chain risk designation (Feb 27)

  • Source: Hegseth statement, confirmed by multiple outlets
  • Quote: “In conjunction with the President’s directive for the Federal Government to cease all use of Anthropic’s technology, I am directing the Department of War to designate Anthropic a Supply-Chain Risk to National Security.”
  • Result: Contractor prohibition effective immediately; 6-month transition
  • Date verified: 2026-02-27

Trump order to cease Anthropic use

  • Source: Multiple outlets (CNN, CNBC, NPR, Axios)
  • Result: All federal agencies ordered to stop using Anthropic products
  • Date verified: 2026-02-27

OpenAI classified network deal and redlines

  • Source: Sam Altman X post, Feb 27, 2026; OpenAI “Scaling AI for Everyone” blog
  • Quote: “Two of our most important safety principles are prohibitions on domestic mass surveillance and human responsibility for the use of force, including for autonomous weapon systems. The DoW agrees with these principles, reflects them in law and policy, and we put them into our agreement.”
  • Date verified: 2026-02-27

Anthropic legal challenge

  • Source: Anthropic statement (anthropic.com/news/statement-comments-secretary-war)
  • Quote: Vowed to “challenge any ‘supply chain risk’ designation in court”
  • Date verified: 2026-02-27

xAI position

  • Source: Pentagon official via FT
  • Quote: “Musk’s Grok ‘is on board with being used in a classified setting’”

Employee solidarity letter

  • Source: TechCrunch, Engadget, CNBC
  • Result: 300+ Google employees + 60+ OpenAI employees signed “We Will Not Be Divided”
  • Date verified: 2026-02-27

โš ๏ธ PARTIAL: Unconfirmed

DPA invocation status

  • DPA was threatened but not confirmed as separately invoked โ€” supply chain risk designation appears to have been the primary enforcement mechanism used

OpenAI agreement text

  • Full text of OpenAI-DOD agreement not publicly released; safety limits known only from Altman’s X post
  • Whether OpenAI’s “human responsibility for use of force” is equivalent to Anthropic’s “no fully autonomous weapons” is not yet independently verified

Sources


Last verified: 2026-02-28 Next review: 2026-03-14 or immediately if legal challenge proceeds