SCOTUS killed the tariff statute; the tariffs barely moved

On February 20, the Supreme Court struck down Trump's IEEPA tariffs 6-3, with Chief Justice Roberts noting that the word "tariff" doesn't appear anywhere in the statute. Within 90 minutes, the administration signed a replacement order under Section 122 of the Trade Act of 1974. By the next morning the rate was 15% worldwide. Yale's Budget Lab put the average U.S. tariff rate at 16.9% before the ruling and 15.4% after. Treasury Secretary Bessent said 2026 tariff revenue would be "virtually unchanged."

If you were waiting for the ruling to unlock capital allocation, stop. Nothing unlocked.

The operational reality is a legal reshuffling that leaves your P&L roughly where it was and your planning environment materially worse. Section 122 has a 150-day statutory cap and requires a "large and serious" balance-of-payments crisis the U.S. doesn't have. It will get challenged. It will probably lose. And the previous IEEPA regime ran for about 16 months before it lost. Plan for rolling 150-day windows under whichever statute is available next. That is now the policy, not a bug in the policy.

Yes, but — a reasonable read is that the Court just spent political capital ruling against the administration on trade specifically to preserve credibility for bigger rulings ahead. Fine. That doesn't help you underwrite anything. It makes the Fed independence case on the docket the single largest unpriced event on the calendar, and it means the Major Questions Doctrine — the reasoning Roberts used to kill IEEPA tariffs — is now a load-bearing part of American regulatory law.

What the doctrine does to the ground under your product

MQD says agencies and executives can't claim sweeping new powers from ambiguous statutory language without explicit congressional authorization. SCOTUS used it on the OSHA vaccine mandate, on EPA emissions, and now on presidential trade authority. The next targets are visible from here: SEC cyber disclosure rules built on general securities authority, FTC data security enforcement built on Section 5 "unfair practices," and CISA rulemaking that stretches CIRCIA further than the statute reads.

If your security program's board narrative is "we must comply with the SEC rule," the foundation is softer than it was two years ago. Rebuild the narrative on material cyber risk to the business. The threat landscape isn't going anywhere; the mandates might.

The same logic applies to any product feature whose moat is an agency interpretation rather than an explicit statute. Compliance-tech built around a specific rulemaking has a shorter half-life than compliance-tech built around a durable underlying obligation. Audit which is which this quarter.

The refund window nobody's moving fast enough on

Justice Kavanaugh's dissent flagged that the government may owe refunds on the IEEPA tariffs collected across roughly eight months — billions, distributed unevenly across every importer of record in the country. Most companies will not file quickly. The ones that do will have procedural advantage in what turns into a crowded queue.

If your company or your portfolio companies paid duties under IEEPA between June 2025 and February 2026, this is the one item this week with a real deadline attached. Get trade counsel scoped inside 10 business days and filings drafted inside 60. This is act-now in the specific sense that early filers benefit and late filers wait years.

What actually changes in your operating plan

Stress-test 2026 against a 15% worldwide tariff persisting through August, with meaningful probability of a successor regime immediately after. Every supply contract with tariff pass-through or force majeure language needs an audit — counterparties will exploit the ambiguity between struck-down and replacement authorities in both directions. Dual-source your top five tariff-exposed inputs. Companies that built supply-chain flexibility during COVID are the same ones absorbing this cycle; the tuition on skipping that lesson is now higher.

For security and infrastructure specifically: hardware refresh budgets need a tariff line item. Palo Alto, Fortinet, HSMs, DR-site buildouts — all internationally sourced, all now carrying a surcharge that outlasts any single fiscal planning cycle. Smaller security vendors with thin margins and international supply chains are a vendor-solvency risk your third-party program should be monitoring. A vendor failing mid-contract is an operational security event.

European market access is the quieter, more structural story. EU defense procurement preferences are hardening into policy and will extend to cloud, cyber, and dual-use tech on an 18-month timeline. If your European government revenue depends on being the default American partner, that default is degrading in real time. An EU entity with local leadership and data residency is becoming table stakes, and building it organically takes longer than the policy window allows.

The one thing to do this week

Stand up two artifacts by Friday. First, a one-page tariff exposure map: which SKUs, which suppliers, which contracts have pass-through clauses, dollar impact at 15%. Second, an IEEPA refund inventory: duties paid between June 2025 and February 2026, with a filing owner named. Everything else on this list can wait a sprint. Those two cannot, because one determines what your margins look like at the next board meeting and the other has a queue forming in front of it right now.