OpenAI's one-year Defense Department award
$200M
Awarded June 16, 2025; a further Pentagon deal was signed Feb. 27, 2026
OpenAI's War Department product accreditation
IL5
Controlled Unclassified Information; ChatGPT Mil launched on GenAI.mil Aug. 31, 2026
Anthropic net loss, nine months 2026
$104B
Nine months ended Sept. 30, 2026, per the amended S-1
Anthropic committed compute and infrastructure spend
$895.4B
Purchase commitments and leases disclosed in the amended S-1
THE ANNOUNCEMENT
A Senior Counselor Is an Advisory Seat, Not a Contracting Entity
OpenAI announced on November 2, 2026 that Dan Driscoll — the Army secretary who resigned on August 31, 2026 — would join as Senior Counselor for National Security Modernization, a newly created role advising senior leadership, coordinating with allied governments, and helping internal teams understand the operational needs of national security institutions. The remit runs explicitly through allied governments and policy modernisation, and it builds on OpenAI's cyber-resilience work with partners under its Daybreak programme. What makes Driscoll unusual is operational seniority rather than policy seniority: he ran the Army, he is the former service secretary most associated with the drone strategy, and he spent five years in uniform before moving into venture capital and consulting.
The stronger claim — that this is the first frontier lab to buy defence credentials instead of lobbying access — does not survive the record. Anthropic named Mariano-Florentino Cuéllar its first chief global affairs officer in August 2026. OpenAI's national security policy team has been led by Sasha Baker, the former acting under-secretary of defence for policy, since 2024, and in October 2026 added Thomas Lind, a former White House cyber official, to lead cyber and strategic risk. The War Department had already signed classified-network agreements with eight frontier companies six months before the appointment. Driscoll is the most senior operator hired into the role, not the first person hired into a national security role.
- The role is advisory. OpenAI describes advising senior leadership and external partners, not running a programme office, holding a contracting warrant or signing for a vehicle.
- The scope is international by design — allied governments, democratic AI buildout and cyber resilience — which puts export-control exposure directly on the operating model.
- No compensation, no facility clearance for the company and no new prime-contract award was attached to the announcement.
- OpenAI already held a War Department contract to place ChatGPT inside GenAI.mil, the enterprise platform serving the department's personnel.
| Date | Company | Appointment | What it buys |
|---|---|---|---|
| Apr. 9, 2026 | OpenAI | Sasha Baker leads the national security policy team | Policy framing inside the lab |
| May 1, 2026 | War Department | Classified-network agreements with eight frontier companies | Deployment rights on Impact Level 6 and 7 networks |
| Aug. 4, 2026 | Anthropic | Mariano-Florentino Cuéllar named chief global affairs officer | Allied-government and policy access |
| Oct. 2, 2026 | OpenAI | Thomas Lind leads cyber and strategic risk on the policy team | Offensive-cyber credibility |
| Nov. 2, 2026 | OpenAI | Dan Driscoll, Senior Counselor for National Security Modernization | Requirements influence and allied-government access |
WHERE THE CLEARANCE ACTUALLY SITS
OpenAI Reaches Classified Networks Through Someone Else's Cloud
The War Department's own releases settle what the hire cannot buy. On August 31, 2026 the department launched OpenAI's ChatGPT Mil on GenAI.mil — accredited for Controlled Unclassified Information at Impact Level 5, the unclassified-but-sensitive tier, not a classified network. The classified layer came separately, on May 1, 2026, when the department signed agreements with eight companies — SpaceX, OpenAI, Alphabet, NVIDIA, Reflection, Microsoft, Amazon and Oracle — to deploy capabilities on Impact Level 6 and Impact Level 7 networks. That list is the tell: the cleared cloud providers and the chipmaker sit alongside the labs, because the facility clearance and the enclave are theirs, not the labs'.
OpenAI's own account of its War Department agreement confirms the architecture. Deployment is cloud-only, OpenAI retains control of its safety stack, and the human safeguard is 'cleared forward-deployed OpenAI engineers' with cleared safety and alignment researchers in the loop. The partnership model is explicit too: Palantir announced in November 2024 that it would be the first industry partner to bring Anthropic's Claude models into classified environments for U.S. intelligence and defence agencies, alongside AWS. The model reaches the classified customer through the cleared integrator and the cleared cloud. The lab supplies the model and the safety layer; somebody else supplies the keys.
| Company | Route into defense work | Disclosed scale |
|---|---|---|
| OpenAI | ChatGPT Mil on GenAI.mil at Impact Level 5; cloud-only War Department agreement; participant in Impact Level 6 and 7 agreements | $200M one-year Defense Department award, June 2025 |
| Microsoft | Signatory to the Impact Level 6 and 7 classified-network agreements | Q1 FY2027 revenue $92.3B |
| Amazon | Signatory to the Impact Level 6 and 7 classified-network agreements; cleared cloud for defense AI | Q3 2026 revenue $201.9B |
| Alphabet | Gemini on GenAI.mil; signatory to the Impact Level 6 and 7 agreements | Q3 2026 revenue $127.6B |
| NVIDIA | Signatory to the Impact Level 6 and 7 agreements; supplies the compute layer | Q2 FY2027 revenue $96.2B |
| Palantir | Owns the cleared data and workflow layer; prime on Army programs; distributes rival models into classified environments | Q3 2026 U.S. government revenue $953M |
| Leidos | Cleared integrator labor; National Security & Digital is 44% of revenue | $48.4B backlog; 87% of fiscal 2025 revenue from U.S. government |
| Booz Allen Hamilton | Cleared integrator labor across national security and civil agencies | $2.78B Q2 FY2027 revenue; $41B backlog |
THE ARITHMETIC
$200 Million Against a $953 Million Quarter
OpenAI's defence business is real but small. The Defense Department awarded it a one-year, $200 million contract in June 2025, and the company signed a further arrangement with the Pentagon in February 2026. Set that against Palantir, which booked $953 million of U.S. government revenue in Q3 2026 alone, up 96% year over year and up 18% sequentially. One quarter from one incumbent is roughly five times the entire one-year award to the lab. The appointment moves no defense revenue in the quarter it was announced, and it does not change the ratio between the cleared integrator and the frontier lab.
Palantir U.S. government revenue, 2026 quarters
Palantir's cleared U.S. government revenue compounded from $687 million to $953 million over three quarters. OpenAI's entire one-year Defense Department award is $200 million.
Unit: $ millions
Q1 2026
Up 84% year over year
687
Q2 2026
Up 90% year over year
809
Q3 2026
Up 96% year over year
953
The labour-based primes carry the same arithmetic at larger scale but with different trajectories. Leidos generated 87% of fiscal 2025 revenue from U.S. government customers, carried a $48.4 billion backlog into 2026 and grew second-quarter revenue 7.2% to $4.56 billion. Booz Allen Hamilton's revenue fell 3.9% year over year to $2.8 billion in its September 2026 quarter, with management attributing the shortfall to a slowed procurement environment and slower program starts, predominantly at civil customers. Between them they show what a shrinking prime pool looks like long before any lab is named on a classified program.
WHO LOSES THE MARGIN
OpenAI's Own Contract Already Describes the Deliverable Leidos Sells
The competitive vector is not models. It is cleared people. OpenAI's War Department agreement promises cleared forward-deployed engineers and cleared researchers in the loop — the same embedded, cleared-labour model that Leidos and Booz Allen Hamilton sell as billable services and that Palantir built into its platform. Hiring a former service secretary is the most direct route to recruiting, clearing and placing that labour pool. The appointment recruits the cleared workforce without buying a contractor, and that is a recruiting agenda dressed as a policy appointment.
- OpenAI's War Department agreement already commits to cleared forward-deployed engineers — precisely the line item the services primes sell to the same customer.
- Booz Allen Hamilton's national security revenue grew only 5.9% on revenue excluding billable expenses while total revenue fell 3.9%, leaving a $41 billion backlog up just 2% year over year.
- Leidos was selected by U.S. Cyber Command on Oct. 28, 2026 to deploy a unified cyber planning platform, and on Nov. 2, 2026 said it is mobilising supply chain to scale production of thousands of U.S. cruise missiles — hardware and cleared programme management, not model subscriptions.
- OpenAI is committing $1 billion in subsidised Daybreak access over six months to state and local governments, critical infrastructure operators, community banks and open-source maintainers, and is pulling security companies and systems integrators into that funnel.
DISCLOSURE LIABILITY
Anthropic's Public S-1 Puts a Price on the Defense Future
The liability side became public on October 26, 2026, when Anthropic filed its S-1, and it was amended on November 2 — the same day OpenAI announced the Driscoll appointment. The amendment puts the export-control surface in writing. Models and platforms may be controlled under the Commerce Department's export rules or, in narrower cases, under ITAR, and providing them can amount to the export of a defence article or defence service, requiring licences or other government authorisation; the filing calls export classification 'inherently uncertain.' It also discloses that in June 2026 Commerce imposed worldwide restrictions on the Fable 5 and Mythos 5 models, and that the company disabled both for all customers until the restrictions were lifted.
Anthropic's disclosed net loss as filed
Losses scale faster than revenue: $33.2 billion of revenue in the first nine months of 2026 against a $104 billion net loss and $895.4 billion of committed compute and infrastructure spend.
Unit: $ billions
FY2025
Revenue $4.6B
42
H1 2026
Revenue $16.3B
80.7
9M 2026
Revenue $33.2B
104
| Exposure | What Anthropic's filing says | Why the Driscoll remit touches it |
|---|---|---|
| ITAR and Commerce export rules | Models or platforms may constitute the export of defence articles or defence services; classification is inherently uncertain | Working with U.S. allies turns every allied deployment into a licence question |
| Model availability | June 2026 Commerce restrictions forced Fable 5 and Mythos 5 offline for all customers until lifted | A defense customer cannot run on a model that an export order can switch off |
| Contracting privilege | Misclassification can trigger suspension or debarment from U.S. government contracts and loss of the right to sell to government | OpenAI confirmed a confidential S-1 on June 8, 2026, so the same clauses will become public |
| Compelled access | Personnel and vendors may be legally compelled to provide access to systems, data or model weights | A lab with allied-government relationships attracts exactly that demand |
| Capital structure | $895.4B of committed compute and infrastructure spend against $33.2B of nine-month revenue | Every defense contract carries delivery obligations on an unfunded balance sheet |
For OpenAI the same clock is running. The company confirmed a confidential submission of a draft S-1 to the SEC on June 8, 2026 and said it had not determined timing for further action. Whatever Anthropic discloses about export controls and government contracting, OpenAI will disclose in the same form. That is the real reason a national security counselor is useful to the business: a public listing requires a company to explain in public what it does with classified-adjacent work, and the individual best placed to write that explanation is the one who last ran a service.
HORIZONS
Days to Quarters Versus One to Three Years
- Nov. 3, 2026: Leidos reports third-quarter results and holds its earnings call at 8:00 a.m. ET, with National Security & Digital at 44% of revenue in focus and a $48.4 billion backlog to convert.
- November 2026: NVIDIA reports third-quarter fiscal 2027 results, the next read on the compute demand implied by the Impact Level 6 and 7 agreements.
- Anthropic's IPO pricing puts ITAR and government-contracting risk factors in front of the market for the first time; OpenAI's public S-1 remains the larger event still.
- Palantir must deliver $8.530 billion to $8.534 billion of fiscal 2026 revenue to hold the guidance raised on Nov. 2, 2026, with U.S. commercial guided to at least 143% growth.
- If a frontier lab is ever named prime on a classified-network program rather than subcontractor to a cleared cloud or integrator, the labour-based model reprices first: $41 billion of Booz Allen Hamilton backlog and $48.4 billion at Leidos become subcontract flow rather than prime flow.
- Cleared platforms keep the margin because they hold the data and the requirements, which is why Palantir's Army prime agreement for eight TITAN ground systems matters more than any lab's advisory hire.
- The binding constraint on any lab's defense ambition is export classification, not compute: the June 2026 Commerce order showed that one rule can take two flagship models offline for every customer worldwide.
SYNTHESIS
The Seat at the Requirements Table Is Not a Moat
Continue to build an architecture that prevents AI vendor lock and ensures long-term flexibility for the Joint Force.
The most defensible reading is that OpenAI bought influence over the specification of defense AI, not access to classified material, because the War Department has said in writing that it will not let any single vendor hold the keys. Two consequences then run in opposite directions. Listed integrators and cleared clouds capture the spend whenever a lab deploys, and the toll is a cloud and integration margin rather than a model margin — one quarter of Palantir's U.S. government revenue is roughly five times OpenAI's entire one-year defense award. Meanwhile the labs inherit the disclosure clock, and the first public map of that cost arrives in Anthropic's S-1 rather than in any defense contract: a $104 billion nine-month net loss, $895.4 billion of committed compute, and a June 2026 export order that disabled two flagship models.
What would change the view: a named prime award to a frontier lab on an Impact Level 6 or 7 program, or a facility clearance application in a lab's own name. Until one of those appears, treat the Driscoll appointment as a requirements strategy with a recruiting agenda behind it. The investable conclusion favours owning the cleared integrator and the cleared cloud rather than the lab, and treating Anthropic's upcoming listing as a supply-chain event for the hyperscalers rather than as a defence-sector event.
Where the Spend and the Risk Actually Land
- Owns the cleared data and workflow layer; Q3 2026 U.S. government revenue of $953 million grew 96% year over year and the Army awarded a prime agreement for eight TITAN systems.
- U.S. commercial revenue passed U.S. government revenue for the first time in Q3 2026, so defense now funds the platform rather than carrying the growth story.
- Enterprise value near 56 times trailing sales at Nov. 3, 2026 market values already discounts much of the classified-AI outcome.
- Over one to three years, a prime position on Army ground systems keeps requirements inside Palantir even if labs bid further upstream.
- National Security & Digital is 44% of revenue and U.S. government customers were 87% of fiscal 2025 revenue, so the cleared labour pool is the asset being disintermediated.
- U.S. Cyber Command selected Leidos on Oct. 28, 2026 for a unified cyber planning platform, so cleared platform work still lands with the incumbent prime.
- Q2 2026 revenue of $4.56 billion grew 7.2% against a $48.4 billion backlog; third-quarter results are set for Nov. 3, 2026.
- Near term the funded backlog matters more than the appointment; over one to three years prime flow can become subcontract flow.
- Revenue fell 3.9% to $2.8 billion in the September 2026 quarter, with the shortfall blamed on civil customers and slowed procurement.
- National security grew only 5.9% on revenue excluding billable expenses, against $41 billion of backlog up 2% year over year.
- OpenAI's War Department agreement promises cleared forward-deployed engineers, eroding the labor premium this firm charges.
- Fiscal 2027 revenue is guided to $11.3 billion to $11.6 billion, so the prime pool shrinks even as the defence label expands.
- Named a counterparty to the War Department's Impact Level 6 and 7 classified-network agreements, so classified compute demand routes here whichever lab wins.
- Q2 fiscal 2027 revenue of $96.2 billion and $303.0 billion on a trailing basis give the compute layer scale no lab matches.
- The counterweight is export control, which already forced two rival frontier models offline for every customer in June 2026.
- Over one to three years, classified requirements favour traceable domestic supply chains over offshore capacity.
- Signed the classified-network agreements and provides the Impact Level 6 and 7 deployment resources labs depend on, so Microsoft collects the enclave toll whichever model wins.
- Q1 fiscal 2027 revenue of $92.3 billion and $346.4 billion on a trailing base give the cleared cloud layer scale.
- Government concentration imports the same export-control and sovereign-access scrutiny Anthropic discloses in its S-1.
- Near term the fiscal 2027 first-quarter print dominates; over one to three years sovereign AI demand pulls the same enclave margin.
- Also a counterparty to the classified-network agreements and the largest of the cleared cloud providers, so Amazon is paid the enclave toll whatever model wins.
- Q3 2026 revenue of $201.9 billion and $797.5 billion on a trailing basis widen the base that defense workloads sit on.
- Lab compute commitments are the hyperscaler's revenue and the lab's liability at the same time, which is the trade in both directions.
- Over one to three years, as labs move training into sovereign enclaves, the cloud bill compounds faster than the contract.
- Gemini for Government reached GenAI.mil and Alphabet signed the classified-network agreements, but it sells to cloud rivals and models rivals at the same time.
- Q3 2026 revenue of $127.6 billion against $471.1 billion trailing; vertical integration is strength in consumer AI and ambiguity in defense procurement.
- A single Commerce order disabled two rival flagship models in June 2026, so export classification decides defense model share as much as capability does.
- Near term its closest rival's IPO timetable shapes the bidding; over one to three years sovereign deployments dilute its exclusivity.
