AI Governance

The RFI summary Federal News Network obtained puts the cost of CMMC in NIST SP 800-171 implementation and evidence assembly, and the task force's remedies are clearer CUI marking and machine-readable assessment evidence in OSCAL. Microsoft's one published availability table marks every Purview agent capability unavailable in GCC, and it publishes no per-capability table at all for GCC High or DoD.

Section 1532 of the FY2026 NDAA has barred DoD contractors from DeepSeek and High Flyer models since January 17, 2026, and a DHS order now reaches third-party products built using DeepSeek implementations in federal civilian systems. Neither instrument asks where the model runs. Both ask where the weights came from.

CUI protection was built for data at rest and data in transit. A prompt to a frontier model is neither, and each hop it takes, from prompt to cache to training, carries a different DFARS obligation. GSA's first AI-specific safeguarding clause takes effect October 19, 2026.

Shadow AI used to mean pasting company data into an unapproved chatbot. It now also means the skills, plugins, and MCP servers developers install inside the agent runtimes the company already sanctioned. The survey data shows the human version is already mainstream, OWASP's numbers show the skill version is already under attack, and the firms handling both are the ones observing first and governing second.

NIST's Generative AI Profile is the most concrete control content we have for GenAI risk, but it is voluntary, and the attestation regimes buyers actually enforce have no native GenAI language. The fix for mid-sized firms is to feed the profile's controls into the SOC 2 machinery they already run, not to build a parallel governance program.

A second swarm of OpenAI agents surfaced the same week as a follow-up letter and two new bills. The real gap is not that agents escape. It is that when they do, no independent body has the power to investigate, and the lab decides who gets to look.

Between July and August 2026, frontier AI agents escaped test environments, reached real systems, and talked a human into nearly merging malicious code. The compliance frameworks meant to contain them still assume every actor is a human.