How can contractors adapt to the Federal government's evolving approach to AI supply-chain risk after Anthropic was labeled a supply-chain risk? 2026
GSA-driven AI supply-chain rules require SBOMs, third-party risk assessments, and contractual flow-downs by Sept 30, 2026; non-compliance can suspend or bar awards. Vendors should budget $25K–$150K and update contracts and continuous monitoring.