I believe designating an entity a supply chain risk has far deeper implications than the DoD avoiding that entity, and goes as far as a lawful prohibition for any contractor of the USG being also prohibited from using or working with the entity so designated. Ironically enough, if the comments in this discussion are true that Palantír uses Claude, Palantír would've also been prohibited as well.