Federal AI
Federal AI. Policy, compliance, contracting.
The reference layer for federal AI work. Policy direction, the ATO stack, the contract vehicles. Current as of 2026-06.
POLICY & FRAMEWORKS
Policy & Frameworks
NIST AI RMF, OMB memos, executive orders, DoD AI policy. The high-level direction that everything else flows from.
Open the policy & frameworks page →- REFERENCE // NIST AI RMF NIST AI RMF Quick Reference The voluntary federal framework for managing AI risk. Four functions. Use it to structure your write-up and your conversations.
- REFERENCE // OMB MEMOS OMB Memos Cheat Sheet The operational rulebook for civilian agency AI. Know which memo, which paragraph, which deadline.
- REFERENCE // EXECUTIVE ORDERS AI Executive Orders: Active vs Rescinded A chronological read of the AI EOs from EO 13859 to today. Some are active. Some were rescinded. Some were rescinded then replaced. Know the difference before you cite one.
- REFERENCE // DOD AI DoD AI Policy The DoD has its own AI direction beyond OMB. CDAO sets the agenda. The services execute it. This is the map.
COMPLIANCE & ACCREDITATION
Compliance & Accreditation
FedRAMP, DoD Impact Levels, NIST 800-53, DISA STIGs, SBOMs. What the ATO package asks for.
Open the compliance & accreditation page →- REFERENCE // FEDRAMP FedRAMP Authorization Levels for AI Workloads FedRAMP gates which commercial cloud and SaaS services federal agencies can buy. AI workloads live in this gate. Pick the right tier for the data, plan for the audit.
- REFERENCE // IL2-IL6 DoD Cloud Impact Levels IL2-IL6 DoD's tiered system for unclassified through Secret data. Maps roughly onto FedRAMP plus DoD-specific controls.
- REFERENCE // 800-53 NIST 800-53 Control Families That Matter for AI 800-53 is the backbone of every federal ATO. For AI work, four families matter most. Know them by name.
- REFERENCE // STIGS DISA STIGs for AI Deployment Stacks STIGs are DISA's hardening checklists. If you deploy to DoD, your stack gets STIG'd. Plan for the findings before the assessor shows up.
- REFERENCE // SBOM SBOM Requirements for Federal AI An SBOM tells the buyer what's in your software. For AI, that includes model weights, training data, and the usual dependencies.
CONTRACTING
Contracting
Vehicles, solicitations, work statements. How federal AI work actually gets bought.
Open the contracting page →- REFERENCE // VEHICLES Federal Contract Vehicles for AI Work The big vehicles you'll see in AI procurement. Pick the right one and you can move. Pick the wrong one and you can't.
- REFERENCE // SOLICITATIONS Sample Federal AI Solicitations The best way to read government AI requirements is to read government AI requirements. These are sanitized patterns based on real solicitations you can study.
- REFERENCE // PWS/SOO AI-Specific PWS and SOO Patterns When you write (or read) an AI work statement, certain clauses keep showing up. Know them by name.