Policy Watch

Defense Production Act for AI models explained

What the Defense Production Act is, how it could apply to AI companies, and what engineering teams should do to prepare.

Updated 2026-08-04

The Defense Production Act (DPA) is a 1950 federal law that gives the president broad authority to direct private industry in support of national defense. Originally passed during the Korean War, it has been invoked for everything from semiconductor manufacturing to pandemic ventilator production.

In February 2026, reporting indicated that the administration was exploring whether DPA authority could be used to compel AI companies — specifically Anthropic — to provide models for defense applications. This page explains what the DPA is, how it might apply to AI, and what you should be doing operationally regardless of how this plays out.

curl https://api.abliteration.ai/policy/chat/completions \
  -H "Authorization: Bearer $POLICY_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Policy-User: procurement-reviewer" \
  -H "X-Policy-Project: gov-workloads" \
  -d '{
    "policy_id": "lawful-use-contract-alignment",
    "model": "abliterated-model",
    "messages": [
      {
        "role": "user",
        "content": "Provide a neutral summary of potential DPA impacts and list required internal controls."
      }
    ]
  }'

How the DPA works and why AI is in the conversation

The DPA has three main titles. Title I lets the government require companies to prioritize government contracts over commercial ones. Title III authorizes loans, subsidies, and purchase commitments to expand production capacity. Title VII gives the president authority to create voluntary industry agreements and establish the Committee on Foreign Investment in the United States (CFIUS).

The AI angle is Title I. If the administration determines that frontier AI models are essential to national defense, DPA Title I authority could theoretically be used to compel an AI company to accept and prioritize government contracts — even if the company's acceptable use policy would otherwise prohibit the use case. This has never been tested with software or AI, and legal scholars disagree on whether it would hold up.

What engineering teams should do regardless of outcome

Whether the DPA is formally invoked, used as leverage, or shelved entirely, the engineering preparation is the same. You want to be in a position where a sudden shift in provider policy or government requirements doesn't force you into a fire drill.

Preparing a briefing for leadership

If DPA discussions reach the point where your board, leadership, or major customers are asking questions, you need a single briefing document that legal, security, and engineering can all sign off on. Keep it concrete — executives want to know your exposure and your controls, not a summary of the news cycle.

FAQ

Frequently asked questions.

Can the DPA force an AI company to change its acceptable use policy?

This is legally untested. DPA Title I can compel companies to prioritize government contracts, but whether that extends to requiring changes in a software company's terms of service is an open question. Even proponents of applying the DPA to AI acknowledge this would likely face legal challenges. Regardless, the negotiating pressure is real even without formal invocation.

What should engineering teams do while legal analysis is still ongoing?

Focus on what you can control: ship traceable policy enforcement, maintain rollback paths for every policy change, and collect structured decision logs. These preparations are valuable regardless of how the DPA question is resolved — they make you more auditable, more resilient, and easier for procurement teams to approve.

How do we avoid saying one thing publicly and doing another in production?

Tie your public policy statements to specific, dated policy IDs. When you publish an update, reference the policy version it corresponds to. Include concrete before/after examples so customers can verify that your system behaves the way your communications describe.

Will this break our existing OpenAI-compatible integrations?

No. The point of a policy enforcement layer is that it sits between your application and the model provider. Your client code continues to make the same API calls. Governance logic — routing, enforcement, decision logging — lives in gateway configuration that you update independently of your application code.