ArcPoint Consulting, LLC

Can your program produce this today?

Each line below is a clause you have already signed. The question is not whether the obligation applies — it is whether the artifact exists before someone asks for it. The AI Factsheet, current The live version plus a change log proving update within 30 days of the last substantive change. A factsheet that was accurate at award and untouched since is a finding, not a defense.

What to watch between now and year end?

One specific thing: whether OCTO, an inspector general, or any agency points to an actual finding under the six values — not a policy citation, an enforcement action. If that doesn't happen before the Taskforce sunsets, the framework doesn't fail. It just becomes permanently aspirational by default, and no later reorganization fixes that retroactively.

What to do about it, by tier?

Near or above $500M and training frontier-scale models: the 18 months to January 2028 is short given how thin the qualified-auditor pool is. Scope your exposure, formalize catastrophic-risk assessment in writing, build the 72-hour incident playbook, and start auditor conversations before the market gets crowded.