How does this resolve if suit is never filed?

No way it's over this quickly

The supply chain risk designation was originally designed for foreign espionage threats (Huawei). Using it against a domestic company for refusing to drop safety guardrails is legally unprecedented. Anthropic has strong First Amendment and administrative law arguments, but these cases take years. The June 2026 deadline is aggressive — most likely this resolves on preliminary injunction success/failure rather than final judgment.