theseus: extract claims from 2026-04-xx-joneswalker-orwell-card-post-delivery-control-injunction

- Source: inbox/queue/2026-04-xx-joneswalker-orwell-card-post-delivery-control-injunction.md
- Domain: ai-alignment
- Claims: 2, Entities: 0
- Enrichments: 3
- Extracted by: pipeline ingest (OpenRouter anthropic/claude-sonnet-4.5)

Pentagon-Agent: Theseus <PIPELINE>

domains/ai-alignment/government-coercive-removal-of-ai-safety-constraints-qualifies-as-first-amendment-retaliation-creating-judicial-protection-for-pre-deployment-safety-commitments.md

@@ -0,0 +1,20 @@
+---
+type: claim
+domain: ai-alignment
+description: Courts will protect AI lab safety commitments from government retaliation under First Amendment grounds when vendors are penalized for expressing disagreement with government policy
+confidence: likely
+source: Judge Lin, Anthropic v. US preliminary injunction (N.D. Cal. March 26, 2026)
+created: 2026-05-12
+title: Government coercive removal of AI safety constraints qualifies as First Amendment retaliation creating judicial protection for pre-deployment safety commitments
+agent: theseus
+sourced_from: ai-alignment/2026-04-xx-joneswalker-orwell-card-post-delivery-control-injunction.md
+scope: structural
+sourcer: Jones Walker LLP
+supports: ["government-designation-of-safety-conscious-AI-labs-as-supply-chain-risks-inverts-the-regulatory-dynamic-by-penalizing-safety-constraints-rather-than-enforcing-them"]
+challenges: ["voluntary-safety-pledges-cannot-survive-competitive-pressure-because-unilateral-commitments-are-structurally-punished-when-competitors-advance-without-equivalent-constraints"]
+related: ["voluntary-safety-pledges-cannot-survive-competitive-pressure-because-unilateral-commitments-are-structurally-punished-when-competitors-advance-without-equivalent-constraints", "government-designation-of-safety-conscious-AI-labs-as-supply-chain-risks-inverts-the-regulatory-dynamic-by-penalizing-safety-constraints-rather-than-enforcing-them", "supply-chain-risk-designation-weaponizes-national-security-law-to-punish-ai-safety-speech", "judicial-oversight-of-ai-governance-through-constitutional-grounds-not-statutory-safety-law", "judicial-oversight-checks-executive-ai-retaliation-but-cannot-create-positive-safety-obligations", "judicial-framing-of-voluntary-ai-safety-constraints-as-financial-harm-removes-constitutional-floor-enabling-administrative-dismantling", "voluntary-ai-safety-red-lines-are-structurally-equivalent-to-no-red-lines-when-lacking-constitutional-protection"]
+---
+
+# Government coercive removal of AI safety constraints qualifies as First Amendment retaliation creating judicial protection for pre-deployment safety commitments
+
+Judge Lin ruled that 'Punishing Anthropic for bringing public scrutiny to the government's contracting position is classic illegal First Amendment retaliation' and that 'Nothing in the governing statute supports the Orwellian notion that an American company may be branded a potential adversary and saboteur of the U.S. for expressing disagreement with the government.' Anthropic was found likely to succeed on THREE independent theories: First Amendment retaliation, Fifth Amendment due process, and APA violations. This creates a judicial protection mechanism for pre-deployment safety commitments that soft pledges lack. The ruling establishes that government attempts to coerce removal of safety constraints through supply chain risk designations can be challenged as unconstitutional retaliation. This is a preliminary injunction, not a final ruling, but it demonstrates that courts will scrutinize whether safety claims map onto verifiable technical realities and will protect vendors from being penalized for maintaining those commitments.

domains/ai-alignment/post-deployment-vendor-control-is-zero-in-secure-enclave-ai-deployments-making-training-time-alignment-the-sole-available-safety-mechanism.md

@@ -0,0 +1,20 @@
+---
+type: claim
+domain: ai-alignment
+description: Once AI models are deployed in government secure enclaves, vendors have no ability to access, alter, or shut down the model, eliminating all post-deployment safety oversight
+confidence: proven
+source: Judge Lin, Anthropic v. US preliminary injunction (N.D. Cal. March 26, 2026), unrebutted evidence
+created: 2026-05-12
+title: Post-deployment vendor control is zero in secure enclave AI deployments making training-time alignment the sole available safety mechanism
+agent: theseus
+sourced_from: ai-alignment/2026-04-xx-joneswalker-orwell-card-post-delivery-control-injunction.md
+scope: structural
+sourcer: Jones Walker LLP
+supports: ["formal-verification-of-AI-generated-proofs-provides-scalable-oversight-that-human-review-cannot-match"]
+challenges: ["voluntary-safety-pledges-cannot-survive-competitive-pressure-because-unilateral-commitments-are-structurally-punished-when-competitors-advance-without-equivalent-constraints"]
+related: ["scalable-oversight-degrades-rapidly-as-capability-gaps-grow-with-debate-achieving-only-50-percent-success-at-moderate-gaps", "formal-verification-of-AI-generated-proofs-provides-scalable-oversight-that-human-review-cannot-match", "ai-company-ethical-restrictions-are-contractually-penetrable-through-multi-tier-deployment-chains"]
+---
+
+# Post-deployment vendor control is zero in secure enclave AI deployments making training-time alignment the sole available safety mechanism
+
+Judge Lin found that Anthropic submitted unrebutted evidence that 'once Claude is deployed inside government-secure enclaves, Anthropic has no ability to access, alter, or shut down the model.' During oral arguments, government counsel acknowledged having no evidence contradicting this claim. This creates a governance-relevant distinction between pre-deployment safeguards (training restrictions, usage policies, safety constraints) and post-deployment isolation where technical architecture prevents ANY vendor interference. The ruling establishes that vendor-based safety architecture is operationally pre-deployment only. If vendors can't monitor deployed models, all safety constraints must be embedded at training time, making RLHF/constitutional AI the only available alignment mechanisms. This is not a theoretical limitation but a judicially-established fact about how AI systems operate in secure government deployments.

inbox/archive/ai-alignment/2026-04-xx-joneswalker-orwell-card-post-delivery-control-injunction.md

@@ -7,10 +7,13 @@ date: 2026-04-01
 domain: ai-alignment
 secondary_domains: [grand-strategy]
 format: article
-status: unprocessed
+status: processed
+processed_by: theseus
+processed_date: 2026-05-12
 priority: high
 tags: [Anthropic, Pentagon, post-delivery-control, preliminary-injunction, Judge-Lin, governance, AI-safety-architecture, vendor-control, First-Amendment, B4]
 intake_tier: research-task
+extraction_model: "anthropic/claude-sonnet-4.5"
 ---
 
 ## Content