The Pentagon should not classify an American AI company as a supply-chain risk without technical evidence that the company threatens national security