The General Services Administration (GSA) has a large language model (LLM) clause in the class-deviation text contracting officers insert. Clause 552.239-7001, Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems, is dated September 2026 inside memorandum RGO-2026-01, the General Services Acquisition Regulation (GSAR) overhaul posted on Acquisition.gov. The header is not a press release. It is the clause.

FedScoop, updated October 2, reports that the memo sets October 19 as the effective date, and that contracting officers may use the deviation now, including on contracts already awarded. Crowell reads the same September text and the same October 19 date. A voluntary checklist does not ride into a GSA schedule. This clause does. (Acquisition.gov; FedScoop; Crowell)

The clause applies only when two things are true. The government is buying a system where LLM functionality is a material feature, and government data will be submitted directly to the model or produced by it. Chatbots, agentic systems, and model-enabled document tools sit in that lane when the model is the point of the buy.

It self-deletes, and imposes no obligation, when model use stays inside the contractor's own back-office tools that the government is not buying and cannot open, even if those tools incidentally touch government data. The same exit applies when the model is incidental to a product whose primary purpose is not artificial intelligence. Scope is the first blank on the page. (Acquisition.gov; FedScoop)

Where the clause applies, government data has a short list of permitted uses and a ban on the rest. Training, fine-tuning, or improving a model for other customers is prohibited. So is using that data for advertising, or selling it. At closeout the contractor must delete government data and custom work, including fine-tuned weights, embeddings, indexes, and caches.

The government can suspend use of the model at any time. If a contracting officer later terminates for cause after written notice of noncompliance, decommissioning liability is capped at 25 percent of the affected order and does not include the cost of a replacement. The contractor must use reasonable efforts toward accuracy and objectivity. The older ban on embedding partisan judgments is not the standard in this text. (Acquisition.gov)

Commercial paper does not win a fight with this clause. The text puts itself in the schedule of supplies and services and says it beats the contractor's terms of service, click-wrap, and license. Flow-down tracks the National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework, and only to subcontractors who handle government data. Fully open models skip the foreign-control paragraphs. Open-weight models, weights published and training code withheld, do not.

Two clocks are the ones to calendar. Model disclosure is due within 120 days when the contract does not set another date. Notice of an incident that may affect the confidentiality, integrity, or availability of government data is due within 72 hours. A material drop in safety guardrails or truthfulness gets seven days. Thursday's voluntary Accord does not start any of those clocks. (Acquisition.gov; The Accord)

Saturday already put The Subpoena on the desk, now sent: California Attorney General Rob Bonta's investigative subpoena on OpenAI, inside a California Department of Justice inquiry into cybersecurity incidents and model risk, with last month's Hugging Face investigation now on compulsory paper. Friday's The Probe stays sent: the Federal Trade Commission (FTC) consumer-risk investigation into OpenAI, Anthropic, and other frontier labs, with civil investigative demands and executive testimony next, and METR in the information ask. Thursday's The Accord stays sent: six frontier labs and President Trump signing a voluntary White House Joint Commitment, plus the same-day Super Intelligence rename executive order. Wednesday's Florida's Hold stays sent: Attorney General James Uthmeier's temporary-injunction motion in Highlands County under Florida's Deceptive and Unfair Trade Practices Act (FDUTPA). Tuesday's The AGs' Ask stays sent. Monday's Oregon's Frontier Buy stays sent. Sunday's Supply Chain Risk stays sent. Saturday's Agents That Probe stays sent. Friday's Virginia Executive Order 22 stays sent. California's Executive Order N-9-26 stays. The Cybersecurity and Infrastructure Security Agency (CISA) and NIST Interagency Report (IR) 8587 token guide stays put.

Those are the California subpoena, the FTC probe, the voluntary Accord, the Florida court hold, the federal ask, the Oregon buy gate, the procurement exclusion, the forensic agent map, Richmond, Sacramento, and the federal token track. Today's file is the GSA clause. (The Subpoena; The Probe; The Accord; Florida's Hold; The AGs' Ask; Oregon's Frontier Buy; Supply Chain Risk; Agents That Probe; Virginia; Governor's Office — California; CISA)

Thursday's Agencia Española de Protección de Datos (AEPD) agent breach notice, Wednesday's Korea Internet & Security Agency (KISA) guide, Tuesday's Altman monitorability wall and multi-lab pact, and Monday's Amodei evaluator desks stay on the desk.

They already had their mornings. Madrid, Seoul, the older pact track, and permanent reviewers next to today's GSA clause. (AEPD; SEDaily; TechTimes; Amodei)

Before a contracting officer amends a vehicle, put three blanks on one page. Which GSA schedules, resellers, and subcontractors in your stack already have a named owner for clause 552.239-7001, and who can produce the model list inside 120 days without a scramble. Who signs if the clause bans training on government data and still requires deletion of fine-tuned weights and embeddings at closeout, while the commercial terms say the opposite. What do you tell the board if the clause is usable now, effective October 19, and Saturday's California subpoena plus Friday's FTC calendar are still live.

Write the questionnaire now. Put the same blanks next to every contractor selling a model into a federal buy, then copy it to every vendor still answering data questions with a terms-of-service link. (Acquisition.gov; The Subpoena)

The Move

GSA put an LLM safeguarding clause into the deviation text officers insert. No new statute from Congress this week. A contract term, effective October 19, that officers may use now.

Send counsel and procurement a one-pager. Ask who owns the 552.239-7001 answer sheet today, which buys are material-feature models rather than back-office tools that self-delete, and how the training ban and the 72-hour incident clock sit next to commercial terms the clause says it beats.

If the answer is "we only buy commercial," the blank still goes next to every reseller on a GSA vehicle whose model can touch government data.

Seven bullets. One move.