The White House is closing in on an arrangement that would clear the National Security Agency and other elements of the U.S. intelligence community to put Anthropic's frontier Claude models against classified work, according to a New York Times report surfaced this weekend by The Information. The deal is the most concrete acknowledgement to date that the IC, which has historically rolled its own siloed analytic tools and been reluctant to depend on commercial general-purpose models for anything touching SCI-level data, now sees the cost of staying off the modern post-training frontier as larger than the cost of bringing a vendor inside its enclaves. Coverage to date has not specified which model tier (Claude Opus, Sonnet, Haiku, or a fine-tuned variant), which enclave (AWS Top Secret / IL6, an on-prem deployment, or air-gapped weights), or the dollar figure attached, but the framing is operational rather than experimental.
The arrangement is notable for proceeding despite an unresolved overhang on the DoD side. Earlier this year the Pentagon designated Anthropic a "supply chain risk" following a contract-terms dispute, and that designation has not been publicly retracted. The White House's willingness to move forward anyway, on a separate authority and through a different acquisition pathway, suggests the executive branch is treating IC adoption of frontier reasoning models as urgent enough to route around an open DoD-vendor disagreement rather than wait for it to settle. It also lines up with a broader pattern of 2026 announcements: OpenAI's ChatGPT Gov rollout, the Anthropic-Palantir-AWS partnership for defense workloads from last year, and the steady accumulation of FedRAMP High and IL5/IL6 accreditations across the labs.
For Anthropic specifically, the news consolidates a posture that has been visible for several quarters: the lab markets responsible-scaling commitments to its alignment-focused researcher base while quietly building one of the most aggressive government-sales motions of any frontier lab, with Claude Gov, the Anduril partnership, and now classified-IC access. The substantive open question is what use cases the model is actually approved for at the post-training and deployment layer — analytic triage of open-source intelligence, structured extraction from collected SIGINT, code generation for IC tooling, and agent-style workflows in the analytic enclaves are all very different risk surfaces, and the public reporting does not distinguish them. Expect the next round of reporting to focus on classification-aware fine-tuning, on whether the deployment is read-only or includes agentic tool use, and on which oversight body (ODNI, the IC Inspector General, or a new construct) signs off on monitoring, since each of those decisions will shape how this generalizes across the rest of the IC.
- The Information lede emphasizes the deal advancing despite the DoD's earlier 'supply chain risk' designation on Anthropic.
- The New York Times original reporting frames this as part of a broader spy-agency push for advanced AI access amid chip-supply constraints.