Spanish Prime Minister Pedro Sanchez responded to the Pentagon email leak on Friday 24 April from the EU informal leaders' summit in Cyprus: "We do not work on emails, we work on official documents and positions taken in this case by the United States Government"1. Spain maintains "absolute collaboration with the allies, but always within the framework of international legality." The reference to legality is the diplomatic vocabulary for treating the Pentagon memo as unofficial noise.
The summit convened 26 heads of government in the same building when the leak surfaced. Cypriot President Nikos Christodoulides had already tabled Article 42.7 of the EU treaty, the bloc's mutual-defence clause, on an agenda alongside the Northwood Hormuz track, Ukraine and energy security. Article 42.7 has been invoked only once, by France after the 2015 Paris attacks. Putting it back on the summit table converts the leak from a Spanish bilateral issue into a potential collective-defence discussion.
Calling the memo "emails" rather than a Pentagon position denies its standing without triggering an escalation, and Sanchez's reference to "the framework of international legality" pre-positions the legal vocabulary Spain would reach for if the Pentagon memo were converted to policy. Emmanuel Macron and Keir Starmer used the same legality framing when declining the Iran-campaign coalition, the refusal that the Pentagon memo is now written to punish.
The decision point is whether Cyprus produces an Article 42.7 working group on allied-flagged shipping outside the US two-tier ceasefire bubble, or whether the summit closes with the Sanchez line as the collective position. The former hardens the memo leak into a structural alliance dispute; the latter lets Washington test a second leaked memo against weakened European cohesion. NATO Secretary General Mark Rutte's 9 April "paper tiger" gloss of Trump's view sits between the two possibilities.
