NDAA

Section 1532 of the FY2026 NDAA has barred DoD contractors from DeepSeek and High Flyer models since January 17, 2026, and a DHS order now reaches third-party products built using DeepSeek implementations in federal civilian systems. Neither instrument asks where the model runs. Both ask where the weights came from.

The FY2026 NDAA ordered the Pentagon to build an AI/ML security framework and fold it into DFARS and CMMC. The human-era rule is paused mid-rollout, so defense contractors sit between a rule that cannot see their agents and a successor rule that is signed but not in force.