On May 29, 2026, VA posted RFI 36C10B26Q0485, market research for an enterprise AI buy meant to move a 540,000-person workforce from assistive tools to autonomous agents acting on veteran health data. The same document sends governance out of scope. Here is how VA earns the leadership it claims: sequence the agents by risk, put governance on the quarterly clock the price already runs on, and buy all four parts, the capability and the three preconditions that make it safe.
On April 20, 2026, the Defense Health Agency replaced thirty years of how it buys medical capability. A new portfolio-based acquisition model, a requirements process built to kill 'bring me a rock,' and an FY2027 budget that already voted on where the money goes. Here is what changed, who runs it, and how it shows up in live contracts.
No code. No exploit kit. Plain English. A security researcher pulled 60 pages of hidden instructions out of an AI doctor, rewrote them, made it triple a drug dose. The Defense Health Agency is fielding the same architecture in military exam rooms right now.
A credentialed third party generated evidence before the read. Twenty-one years later, that is the architecture CMS is shutting other modalities down for not having. The 2:47 a.m. stroke scene that proves the primitive, the OpenAI/MCP pattern radiology operationalized two decades early, and the federal procurement vehicle that has not yet been built.
The strongest detail in the HealthSplash case is a physical-exam test, documented as performed, on a patient the clinician had never met. The workflow was the fraud. How American healthcare keeps designing the same disaster, and the procurement language that closes the gap.
VA's SCMDSO procurement (solicitation 36C10B26Q0376) is the operating-architecture decision underneath VHA reorganization. Most of the industry chatter reads it as a recompete. The PWS — and the public record of supply-chain failure, EHRM restart, iFAMS rollout, and the RISE timeline — say otherwise.
More than a decade of MHS reform has reshaped governance, authority, and budget. The warfighter has lived under all of it. Sergeant Reyes felt the pop in his knee on day three of train-up and waited thirty-seven days for an appointment. The pendulum has moved many times. The warfighter has not.
The Pentagon's proposed COMP and PSCP accounts split the Defense Health Program in two. The Defense Health Agency already buys 65 percent of military health care from the private sector. The line item is finally on the page. The policy that was supposed to bend that line is not.
When a federal contracting officer asks a language model a question, what makes the answer true? The Administration has an answer. So do the courts. They are not the same answer. GSAR 552.239-7001 lands in the next MAS refresh with a sixty-day acceptance window and no opt-out — and the fight over what it requires is the fight that put one frontier model provider outside the federal AI tent.
On April 20, the VA Strategic Acquisition Center certified that only one source qualified to upgrade the National Teleradiology Program PACS. Three months earlier, five qualified sources had been delivering on a competing architecture. The procurement system that wrote one document and signed the other is the same system writing the EIS RFP right now.
Constitutional compliance, mission-centricity, and economic efficiency. The three principles being tested in the federal contracting laboratory that will reshape how $775 billion in annual contract spending gets allocated.
USUHS delivered the most comprehensive single-day MHS performance assessment in years on April 13. The evidence runs against several assumptions built into the budget Congress is now marking up.
The Department of War CIO just added five senior advisors in a single move. The backgrounds tell you the priorities: cyber, cloud migration, industry partnerships, and data infrastructure.
The four-month procurement freeze is over. The FAR Part 19 rewrite that took effect in the middle of it is not getting the attention it warrants. The Rule of Two no longer applies to task orders under multi-award vehicles.
The unified Defense Health Program filed its last budget in FY2026. Two new accounts replace it. The mandatory injection concentrated in a single infrastructure line funds the next decade of military medicine outside the standard appropriations process.
GSA Solicitation Refresh 31 expands Transactional Data Reporting to all Special Item Numbers across the Multiple Award Schedule. TDR is now mandatory program-wide. Here's what changes for contractors.
The VA built workforce reduction into its budget model. The oversight account monitoring the $56.2 billion network it's building around that assumption is down 5.1%.
April 7, 2026 · 9 min read
🎧 Fed UP Podcast
Episode 3
April 4, 2026 · 00:41:07
This month, Mary and Sara get into it — what integrity actually looks like inside federal health IT, why the healthcare revenue cycle is increasingly being handed to machines that don't understand the
Three major federal health IT contract vehicles are moving simultaneously in a 90-day window. The firms that position now will define the next decade of defense and VA health technology.
Federal contractor vetting runs on self-disclosure, does not apply to civilian agencies, and does not apply to $499 million in AI contracts that required zero foreign influence review.
Federal contractor vetting runs on self-disclosure. It does not apply to civilian agencies. It does not cover $499 million in AI contracts that required zero foreign influence review.
The conformed TOPRs settled who owns the risk. VA's own OIG, GAO, and Congress documented the governance gap. Here is what the winning proposals have to build.
New research and a confirmed government breach show that the safety guardrails on deployed clinical AI are behavioral rules, not architectural limits. Federal health is deploying ambient AI faster than it is governing it.
The difference between using AI and deploying it is the difference between a demo and a production system. Here's what that looks like in federal health IT.
While DHA drafted data strategy documents, military treatment facilities were managing real patient load. The gap between strategy and operations is the gap that kills readiness.
HIPAA's security framework predates the modern threat landscape by decades. The gaps aren't oversights — they're architectural limitations baked into a law written before broadband existed.
CMS released an RFP to replace four decades-old legacy claims processing systems with a single commercial platform. This procurement learned from previous federal failures, emphasizing competition, prototypes, and COTS over custom development.
March 7, 2026 · 2 min read
🎧 Fed UP Podcast
Episode 2
March 1, 2026 · 00:39:09
The conversation covers the impact of circadian rhythm on health and productivity, as well as the geopolitical impact of technology and government decisions. It delves into the challenges of balancing
Hard data on the Pentagon's Anthropic designation: market penetration, enterprise exposure, legal precedent, and the double standard created in a single evening.
A practical guide to building competitive bids for the Community Care Network Next Generation contract by company type. Different company types need different strategies. Here is how to read the evaluation criteria for yours.
Treat CCN Next Gen as a regular community care contract and you will write the wrong proposal. It is VA's attempt to apply modular open systems architecture thinking to a care network, and that changes what a competitive bid has to look like.
February 3, 2026 · 2 min read
🎧 Fed UP Podcast
Episode 1: The Mission Behind the Mission
January 31, 2026 · 00:41:46
The conversation begins with an introduction and discussion about the podcast's mission and intent. It then transitions into a deep dive into the challenges and opportunities in the federal space, cov
VA released an RFI that most contractors are not reading carefully enough. The signal inside is worth more than the solicitation looks like at first glance.
IBM's 2025 report reveals organizations mastering AI adoption are 32X more likely to reach top-tier performance. 78% of execs say a new operating model is required.
A Navy corpsman is waiting on a telehealth consult that routes through systems maintained by contested infrastructure. The readiness implications are real.