The Department of War suspended third-party certification on July 13. The mechanism that cost Health Net's parent eleven million dollars was never part of it, and the network that mechanism asks you to vouch for is changing faster than the document describing it.
The Department of War CIO just added five senior advisors in a single move. The backgrounds tell you the priorities: cyber, cloud migration, industry partnerships, and data infrastructure.
Federal contractor vetting runs on self-disclosure. It does not apply to civilian agencies. It does not cover $499 million in AI contracts that required zero foreign influence review.
New research and a confirmed government breach show that the safety guardrails on deployed clinical AI are behavioral rules, not architectural limits. Federal health is deploying ambient AI faster than it is governing it.
HIPAA's security framework predates the modern threat landscape by decades. The gaps aren't oversights — they're architectural limitations baked into a law written before broadband existed.