CGRCC / rule
Covered agencies must update procurement procedures to include the required LLM terms.
AIR-21AFA15D02 · LEGACY_PUBLISHED · source version a7811294bc65a07f
Covered agency must update LLM procurement procedures.
Meaning & implementation context
Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.
- Source Release
- 2026-10-03.2
- Adopted
- No
- Machine Executable
- No
An AI system or employee activity involves LLM procurement procedures. Confirm the actor and source conditions before using this template.
Provide a traceable control for the action: update LLM procurement procedures.
Open original AIR rule card ↗Source-reported relationships
1 associations retained with their original context.
SUPPORTED BY SOURCE REQUIREMENT · REQ-bbd838118adde1e3421d@e7ddb70631fec6e5
SOURCE_REPORTED_REVIEW_REQUIRED
{
"sourceKey": "omb-m-26-04@8cd9a5e0e73d",
"locator": "Agency Actions (c)"
}Inspect target record ↗Owner interpretation review
Append a catalog review decision. The source record remains immutable.
Versioned CGRCC JSON
{
"key": "AIR-21AFA15D02@a7811294bc65a07f",
"id": "AIR-21AFA15D02",
"version": "a7811294bc65a07f",
"kind": "rule",
"lifecycle": "LEGACY_PUBLISHED",
"title": "Covered agencies must update procurement procedures to include the required LLM terms.",
"statement": "Covered agency must update LLM procurement procedures.",
"family": "Procurement",
"body": {
"legacy": {
"id": "AIR-21AFA15D02",
"version": 2,
"title": "Covered agencies must update procurement procedures to include the required LLM terms.",
"text": "Covered agency must update LLM procurement procedures.",
"topic": "Procurement",
"intent": "update llm procurement procedures",
"status": "candidate",
"semanticStatus": "human-validation-required",
"variants": [
{
"sourceId": "omb-m-26-04",
"control": "Agency Actions (c)",
"sourceVersion": "M-26-04",
"url": "https://www.whitehouse.gov/wp-content/uploads/2025/12/M-26-04-Increasing-Public-Trust-in-Artificial-Intelligence-Through-Unbiased-AI-Principles-1.pdf#page=3",
"actor": "Covered agency",
"modality": "must",
"action": "update",
"object": "LLM procurement procedures",
"condition": "Within the source scope; assess applicability before adoption.",
"exception": null,
"timing": "By 2026-03-11",
"authority": "binding-within-defined-federal-scope",
"jurisdiction": "United States",
"checkedAt": "2026-09-28",
"status": "interpretation-needs-review",
"examples": {
"meetsRule": "Covered agency performs the required action \"update\" for LLM procurement procedures within these source conditions: Within the source scope; assess applicability before adoption., and retains evidence.",
"doesNotMeetRule": "Covered agency omits the required action \"update\" for LLM procurement procedures while those source conditions apply.",
"outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
}
}
],
"situation": "An AI system or employee activity involves LLM procurement procedures. Confirm the actor and source conditions before using this template.",
"purpose": "Provide a traceable control for the action: update LLM procurement procedures.",
"examples": {
"meetsRule": "Covered agency performs the required action \"update\" for LLM procurement procedures within these source conditions: Within the source scope; assess applicability before adoption., and retains evidence.",
"doesNotMeetRule": "Covered agency omits the required action \"update\" for LLM procurement procedures while those source conditions apply.",
"outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
},
"evidence": [
"Dated record of the action",
"Responsible actor and approval, where required",
"Applicable source edition and scope"
],
"enforcement": {
"mode": "policy-template",
"adapter": "Human or authorized system adapter required",
"machineExecutable": false
},
"limitations": [
"A rule card is an interpretation aid, not an applicability determination.",
"Equivalent intent does not make different source obligations interchangeable."
],
"createdAt": "2026-10-03",
"updatedAt": "2026-10-03"
},
"sourceRelease": "2026-10-03.2",
"adopted": false,
"machineExecutable": false
},
"versions": [
{
"version": "a7811294bc65a07f",
"key": "AIR-21AFA15D02@a7811294bc65a07f"
}
],
"provenance": [],
"relationships": [
{
"id": "MAP-451d2a8f4e30c1268bf553d5",
"from": "AIR-21AFA15D02@a7811294bc65a07f",
"to": "REQ-bbd838118adde1e3421d@e7ddb70631fec6e5",
"kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
"status": "SOURCE_REPORTED_REVIEW_REQUIRED",
"body": {
"sourceKey": "omb-m-26-04@8cd9a5e0e73d",
"locator": "Agency Actions (c)"
},
"fromKeys": [
"AIR-21AFA15D02@a7811294bc65a07f"
],
"toKeys": [
"REQ-bbd838118adde1e3421d@e7ddb70631fec6e5"
],
"resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
}
]
}