法院裁定：因拒绝启用 Claude 功能，特朗普政府可将 Anthropic 列入黑名单

英文标题：Court rules Trump can blacklist Anthropic for refusing to enable Claude features

上诉法院多数意见认为，Anthropic 阻止美国政府使用部分 Claude 功能，可能构成法律第 4713 条所定义的“供应链风险”。法院认定，美国政府合理担忧 Anthropic 会通过调整 Claude 设计，阻止其执行政府认为已获合同授权且必要的国家安全任务。持反对意见的法官认为，该法律原本旨在应对敌对国家和恶意行为者渗透联邦供应链，不应被用于惩罚承包商公开、诚实地执行产品使用限制。该裁决意味着，AI 公司针对军事自主武器和大规模监控等用途设置的模型限制，可能面临被政府以供应链安全为由排除出采购体系的风险。

打开原文相关 2 · 机会 0

中文

法院表示，“任何人”（“any person”）这一表述说明，该定义并不限于敌对方或外国实体。法院还指出，“拒绝”（“deny”）一词同样适用于 Anthropic 阻止美国使用某些 Claude 功能的情形。

法院多数意见称：“总而言之，我们认定，部长对于 Anthropic 禁止 Claude 执行该部门所要求的合法行动的担忧，符合第 4713 条所称的‘供应链风险’。”多数意见还表示，“该部门有合理理由担心，Anthropic 可能操纵 Claude 的设计，使其无法执行该部门认为已获合同授权且必要的国家安全职能。”

法官的反对意见

投下反对票的是由老布什提名的法官 Karen Henderson。Henderson 对多数意见关于第 4713 条定义的解读提出异议，称相关动词“在其法定语境下理解，均指向故意阻碍或窃听已进入联邦供应链的受覆盖物项之‘功能、使用或运行’。”

Henderson 写道，国会“是在回应美国情报界对于立法的呼吁后制定该法，以应对‘敌对民族国家及其他不良行为者’通过供应链渗透联邦政府信息与技术系统的威胁。”她表示，不应将该定义解释为涵盖“承包商诚实且事先明确地执行政府不赞成的、针对受覆盖物项使用的限制”。

Anthropic 指称，在该公司拒绝取消对其产品用于致命自主战争和大规模监控美国人的限制后，特朗普政府对该公司实施了非法报复。加州地区法院法官同意这一观点。

上诉法院表示，Anthropic“将限制条件编码进 Claude，以阻止该模型执行 Anthropic 希望阻止的任务。这些限制曾不止一次阻止 Claude 执行政府用户要求的任务。而最近，双方就合同禁令是否禁止在一项正在进行的海外军事行动中使用 Claude 发生争议，导致该部门无法确定 Claude 是否会按需要和预期运行。”

北加州地区法院的案件由拜登任命的法官 Rita Lin 审理。Lin 认定，将 Anthropic 列入黑名单违反了《第一修正案》。她写道：“空洞地援引国家安全，并不是惩罚和报复政府批评者的一张空白支票。”

English / 原文

The use of “any person” shows that the definition is not limited to adversaries or foreign entities, the court said. The court also pointed to the word “deny,” which it said applies to Anthropic preventing the US from using certain Claude features.

“In sum, we conclude that the Secretary’s concern about Anthropic disabling Claude from performing lawful actions requested by the Department qualifies as a ‘supply chain risk’ within the meaning of section 4713,” the court majority said. It also said “the Department reasonably feared that Anthropic might manipulate Claude’s design to prevent it from performing national-security functions that the Department deems contractually authorized and necessary.”

Judge’s dissent

The dissenting vote was cast by Judge Karen Henderson, a George H.W. Bush appointee. Henderson disputed the majority’s reading of the definition in 4713, saying that when “viewed in their statutory context, the verbs at issue are all directed at deliberately impeding or eavesdropping on the ‘function, use, or operation’ of a covered article that has entered the federal supply chain.”

Congress “enacted the statute in response to calls from the US intelligence community for legislation to meet the threat of ‘[h]ostile nation state and other bad actors’ infiltrating the federal government’s information and technology systems through its supply chains,” Henderson wrote. She said the definition should not be interpreted to cover “a contractor’s honest and upfront enforcement of restrictions on a covered article’s use disfavored by the government.”

Anthropic alleged, and the district court judge in California agreed, that the Trump administration illegally retaliated against the company after it refused to drop restrictions on the use of its products for lethal autonomous warfare and mass surveillance of Americans.

The appeals court said that Anthropic “encodes restrictions into Claude that prevent the model from performing tasks that Anthropic wishes to prevent. On more than one occasion, these restrictions have stopped Claude from performing tasks requested by government users. And recently, a dispute arose over whether the contractual prohibitions barred the use of Claude in an ongoing overseas military operation, leaving the Department uncertain whether Claude would perform as needed and intended.”

The case in the Northern District of California was presided over by Judge Rita Lin, a Biden appointee. Lin determined that the blacklisting violated the First Amendment. “The empty invocation of national security is not a blank check to punish and retaliate against government critics,” she wrote.