Browse Cases

Why It Matters: Although the court will almost certainly grant this routine, unopposed request without meaningful scrutiny, the filing carries a signal worth tracking: California's own AG is publicly characterizing the trade secret and First Amendment questions at the heart of this case as novel and lacking established answers. The answering brief due July 15, 2026 will be the first substantive articulation of California's defense of its AI disclosure statute, and the doctrinal framework it advances—particularly on which level of First Amendment scrutiny governs compelled disclosure of AI training data—is likely to influence similar regulatory battles unfolding in other jurisdictions. If the AG's office later argues on the merits that these questions are well-settled in the government's favor, the framing here could surface as an inconsistency.

Why It Matters: This case is an early test of how First Amendment compelled-speech doctrine applies to AI transparency legislation, a category of regulation that is proliferating rapidly at the state level. The central doctrinal battleground — whether training-data disclosure mandates fall within *Zauderer*'s deferential framework or demand heightened scrutiny under *NIFLA v. Becerra* — is genuinely unsettled, and a Ninth Circuit ruling will carry significant weight for how similar statutes in other states are drafted and litigated. If X.AI successfully argues that characterizing datasets, licensing arrangements, and training methodology requires expressive judgment rather than mere factual reporting, it could substantially narrow the space in which governments may regulate AI transparency without triggering serious constitutional review. Conversely, if California prevails under *Zauderer*, it would confirm broad legislative latitude to compel disclosure from AI developers, potentially accelerating similar laws nationwide.

Why It Matters: This brief is worth watching because it asks courts to extend *303 Creative*'s compelled-speech protection — designed for an individual sole proprietor's custom expressive services — to a large corporate entity's standardized AI product-use restrictions, a doctrinal step no circuit court has clearly authorized and one that could significantly reshape how First Amendment and RFRA protections apply to AI developers at scale. The RFRA argument is also novel in posture: applying the substantial-burden framework to a government procurement exclusion rather than a traditional licensing or benefits condition tests the outer boundary of *Hobby Lobby*'s already expansive reading of corporate religious exercise. If any court were to accept these arguments, it would create a powerful new legal tool for technology companies seeking to resist government compulsion to deploy their products for military or surveillance purposes — with implications reaching well beyond this case.

Why It Matters: This case presents the first known attempt to deploy federal supply-chain risk management authority against a domestic AI company's safety architecture, and the court's resolution will define whether § 4713 can reach commercially transparent design choices or is confined to covert foreign-tampering threats — a question with immediate consequences for every AI vendor in the defense industrial base. The government's broad "any person" statutory construction, if accepted, would give national-security agencies sweeping authority to exclude AI firms whose models decline certain task categories, effectively converting safety-by-design into a procurement liability. Two doctrinal fault lines are particularly worth watching: whether the D.C. Circuit accepts the government's *Webster v. Doe* unreviewability analogy for urgency determinations — a position most observers regard as a significant stretch — and whether the court requires the government to address the due process implications of excluding a contractor from already-integrated existing systems, a gap the brief conspicuously leaves open.

Why It Matters: This brief pushes the D.C. Circuit toward a significant and unresolved doctrinal question: whether the First Amendment protects not just a developer's written governance documents — which fit comfortably within existing editorial-judgment precedent — but also the design choices embedded in an AI system itself. The retaliation theory, grounded in publicly documented government hostility toward Anthropic's expressed values, is the brief's most legally orthodox argument and tracks the *Vullo* playbook closely enough to warrant serious merits attention. If the D.C. Circuit reaches the AI-expression question, whatever it says will carry substantial weight in future disputes over government leverage over AI developers' product decisions — a dynamic that extends well beyond the procurement context.

Why It Matters: This case tests whether courts will apply standard APA arbitrary-and-capricious review — including its requirement that agencies follow their own statutory sequence and engage with contrary factual evidence — to national-security procurement decisions that agencies have historically shielded from meaningful judicial scrutiny. The procedural-inversion argument, if accepted, would establish that even the § 4713 emergency carve-out has real limits when the record reflects self-induced urgency, a holding with broad implications for how agencies invoke national-security exigencies to bypass procedural requirements. The First Amendment retaliation theory is the brief's most novel and contested contribution: if the D.C. Circuit reaches it, the case could clarify whether *Vullo*'s government-coercion framework extends to procurement exclusions where agency officials have publicly disparaged a contractor's expressive advocacy, a question with significant consequences for AI companies whose public policy positions increasingly put them in tension with government clients.

Why It Matters: This brief is worth watching primarily because of its unconstitutional conditions framing: by grounding the First Amendment claim in the government-wide scope of the ban rather than the original contract dispute, TPAF gives the D.C. Circuit a doctrinal hook — rooted in *Alliance for Open Society* rather than the more government-favorable *Rust v. Sullivan* — that does not require the court to resolve whether an AI company's values statements and its product functionality are legally separable. That question is genuinely open: no court has squarely addressed whether a national-security procurement statute can support a cross-agency blacklist when the designated "risk" is a contractor's public advocacy about permissible uses of its own technology. The statutory misapplication argument, while creative, turns on whether courts will read § 4713's supply-chain-risk authority as limited to intentional adversarial actors — a reading the government can contest — making the First Amendment theory the stronger vehicle for Petitioner's relief.

Why It Matters: This case presents a potentially novel question of whether FASCSA's national-security supply-chain designation authority—previously applied only to foreign entities—can be used against a domestic AI contractor, and whether such use triggers First Amendment scrutiny as government-compelled alteration of an expressive AI product or retaliation for a company's negotiating position, which could significantly constrain executive procurement power over AI developers.

Why It Matters: This case sits at the frontier of a rapidly developing conflict over whether the government may use investigative or regulatory pressure to punish researchers and civil society groups for influencing how platforms moderate content — a question the Supreme Court skirted rather than resolved in *Murthy v. Missouri* last term. A ruling granting even interim relief could constrain the current administration's ability to deploy such pressure against academics and NGOs who study or critique platform content decisions, making the preliminary injunction proceeding consequential well beyond the parties before the court. EFF's brief also implicitly surfaces two unresolved doctrinal questions: whether civil society actors engaged in advocacy-to-intermediaries hold cognizable First Amendment retaliation claims, and whether *Moody*'s recognition of platform editorial rights generates derivative injury for third parties whose work informs that editorial discretion. The brief's most significant vulnerability is its failure to engage *Murthy*, which erected substantial standing and traceability barriers that the Coalition plaintiffs must clear and that the government is virtually certain to invoke in opposition.

Why It Matters: No court has clearly resolved what constitutional status attaches to the ecosystem of civil society intermediaries — researchers, NGOs, platform accountability groups — when the government uses administrative tools, funding threats, or public condemnation to pressure or penalize them for their work on platform governance. If a court credits EFF's framing, even in dictum, it could establish a meaningful precedential foothold limiting the government's ability to chill independent technology research through means short of direct censorship. The case also sits at a relatively uncharted intersection of APA Section 705 stay doctrine and First Amendment injury, and could generate useful law on what constitutes irreparable harm in speech-chilling contexts under the APA. The brief is most significant not for the questions it answers, but for the ones it forces a federal court to confront directly.