More than 600 Google employees have signed a letter to CEO Sundar Pichai urging the company not to expand Gemini into the Pentagon’s classified military networks. The signatories include DeepMind senior researchers and more than 20 vice presidents and senior executives. Their argument is direct: once an AI system is deployed inside a classified environment, outside entities cannot reliably control how it is used, and the safeguards proposed by the company cannot be enforced in practice.
Existing defense work began in unclassified systems
Google’s relationship with the US Department of Defense did not start with this dispute. In late 2022, Google, AWS, Microsoft, and Oracle were selected for the Pentagon’s JWCC cloud procurement program, which has a ceiling of $9 billion. Later, the Gemini-based GenAI.mil platform went live in December 2025 for unclassified use, and by March 2026, Gemini AI agents had been deployed to the Defense Department’s full workforce of 3 million personnel.
The new conflict centers on a separate agreement now under negotiation. That proposal would extend Gemini from unclassified deployments into classified systems, specifically air-gapped networks physically separated from the outside internet and used for secret military operations. Employee opposition is focused on that shift. The concern is not the already disclosed unclassified deployment, but what happens if Gemini is moved into systems that Google itself cannot observe.
Contract red lines clash with Pentagon terms
According to the source material, Google has tried to draw limits in the contract, including bans on using Gemini to track domestic citizens or to make strike decisions without human involvement. The Pentagon’s position is broader: “all lawful uses.” It also states that outside vendors must not retain control over AI systems used in that environment.
Those terms collide. If Google wants to keep meaningful restrictions, it runs into the Pentagon’s demand for operational autonomy; if it accepts the Pentagon’s language, it loses the ability to ensure Gemini stays out of uses the company claims to reject. Employees wrote that the safeguards offered by Google are “technically infeasible.” The point is narrow, but serious.
Opacity inside classified networks is the central issue
The organizers of the letter described the problem in structural terms: classified work is opaque by definition. Once Gemini enters a classified network, Google would no longer be able to audit API calls, monitor outputs, or adjust guardrails the way it can in unclassified settings.
The letter lists specific risks, including profiling individuals and the possibility of innocent civilians being treated as strike targets. These are presented as concrete concerns tied to existing patterns in AI-assisted military operations. That leaves Google management with a basic problem of verification: if the company cannot access the network, it cannot independently confirm how the system is actually being used.
Policy changes revive memories of Project Maven
In February 2025, Google revised its AI principles and removed explicit language that had barred the development of weapons or surveillance AI. DeepMind CEO Demis Hassabis said the change reflected a global contest for AI leadership. Human Rights Watch and Amnesty International later criticized the revision publicly.
The debate has also brought back comparisons with Project Maven in 2018. In that case, Google worked with the Pentagon on using AI and machine learning to analyze drone footage and help identify targets. The internal backlash was large: 4,000 employees signed a petition, and at least 12 people resigned. Google eventually said it would not renew the contract, and Palantir took over.
The setting now is different from 2018. The source describes AI as part of core defense infrastructure competition, with Google, AWS, and Microsoft all pursuing major government work. That makes the current employee letter land in a far more competitive environment, where internal resistance is confronting a much larger strategic and commercial push.