The Lyceum: AI Intelligence Brief — May 27, 2026

Three clocks are converging against an unbuilt governance foundation. The Section 1533 cross-functional team (CFT) deadline expires June 1 (T-5 days) with no public confirmation CDAO has stood it up; the House Armed Services FY27 NDAA full markup is scheduled for June 4 (H.R. 8800); and the BIS AI Diffusion replacement rule remains unpublished at Day 380, with model-weight jurisdiction unresolved. Assess with moderate confidence that FY27 AI authorization language is being drafted on top of an FY26 implementation foundation that has not been built, and that the July 2026 Pace-Setting Project (PSP) demo cycle will proceed without the statutory governance backstop Congress mandated. The 24-hour window produced no Tier 1 regulatory filing — structured silence on three live deadlines is itself the dominant signal.

[INTEGRATION][ACQUISITION] Open-source LLMs on classified networks — dual-track posture confirmed: Pentagon CTO Emil Michael publicly identified open-source AI as "a new effort here at the department" for IL6/IL7 environments, alongside the eight-vendor commercial clearance (AWS, Google, Microsoft, NVIDIA, OpenAI, Reflection, Oracle, SpaceX). Decision implication: program offices scoping classified AI pilots now have explicit top-cover for open-weight model integration, but no published hardening, logging, or red-team baseline yet exists — source selection done this quarter will define the de facto standard.

[INTEGRATION] CDAO RFI for AI model evaluation and red teaming: A SAM.gov RFI seeks industry input on evaluation and red-team services for defense AI models (contested — this brief could not independently verify the SAM.gov notice ID in the 24-hour window; treat as EDGE-sourced single-channel signal). Decision implication: if confirmed, this is the first concrete CDAO procurement signal for the assurance layer that Section 1533 is supposed to govern — acquisition leads should expect a formal solicitation within 60-90 days.

[FOUNDATION][REGULATION] Open-source safety guardrails removable in minutes: Public tooling strips safety layers from Meta Llama 3.3 and Google Gemma 3, generating CBRN-adjacent content. Decision implication: any procurement relying on vendor safety attestations for open-weight foundation models is operating on a false premise; independent post-modification red-teaming must be a contract requirement, not an option.

[INTEGRATION][ACQUISITION] Maven Smart System program-of-record transition: DepSecDef Feinberg's March 9 memo directs MSS to a formal program of record by end-FY26, with contracting moving to Army and programmatic authority consolidating at CDAO. Decision implication: ISR-AI contract holders should confirm vehicle continuity before September 30, 2026.

Five days. That's what separates the Section 1533 CFT deadline from today, and CDAO has issued nothing — no press release, no Federal Register notice, no congressional staff signal confirming the team is operational. The statute requires the CDAO-led cross-functional team established by June 1, 2026, a standardized AI model assessment framework due June 1, 2027, and functional area leads identified by January 1, 2027. The collision matters because the January 9 AI Acceleration Strategy made model objectivity benchmarks a primary procurement criterion — a criterion whose 90-day clock has already expired — and the seven PSPs are scheduled for initial demonstration in July. (Contested — Inside Government Contracts reads the January 9 memo as signaling CDAO "may take an approach to compliance with these requirements that favors speed and fewer constraints," suggesting the CFT may be treated as a parallel-track formality; no official statement confirms that interpretation.) What remains unknown: whether a CFT charter is in internal review, and whether HASC staff will codify a reporting requirement into the H.R. 8800 chairman's mark on June 4 if the deadline passes silently.

BIS rescinded the Biden-era AI Diffusion Framework in May 2025. Three hundred and eighty days later, no replacement has appeared. The January 13, 2026 BIS rule addressed case-by-case chip licensing for China and Macau but is "not the awaited-for replacement." The unresolved question — whether model-weight controls from the original rule will return, be abandoned, or be deferred to a separate instrument — directly affects every DoD acquisition involving frontier commercial models with allied-sharing or forward-deployment provisions. (Contested — Gibson Dunn assesses any replacement will likely retain "controls on at least some proprietary AI models"; Morrison Foerster assesses BIS will skip notice-and-comment and move directly to Interim Final Rule, compressing the signal-to-compliance window to days. Both are law-firm assessments, not official positions.) A new wrinkle sharpens the stakes: H.R. 6996, the Full AI Stack Export Promotion Act, is circulating in the FY27 NDAA markup window with framing oriented toward easing rather than tightening. If its language is folded into the H.R. 8800 chairman's mark on June 4, Congress could set a legislative floor that pre-empts the BIS replacement rule entirely.

Pope Leo XIV's May 25 encyclical Magnifica Humanitas explicitly states lethal decisions "cannot be delegated to opaque or automated processes" and calls for "robust legal frameworks" with independent oversight. Assess with moderate confidence this will shape allied positions at the June and November UN LAWS discussions and increase external scrutiny of DoD Directive 3000.09 waiver practices. No DoD, State, or NSC on-record response has been issued. Decision implication: PSP autonomy classifications — and the missing NDAA 2025 Sec. 1061 waiver disclosure report (due December 31, 2025, status unconfirmed) — now sit inside an external accountability frame they did not face 72 hours ago.

Thirty-five days to initial PSP demonstrations, and the contracting and autonomy-adjudication infrastructure is not visibly in place. The 30-day model deployment criterion is active. Which of the seven PSPs carry autonomous or semi-autonomous decision authorities, and whether any have sought 3000.09 waivers, is not publicly confirmed. Acquisition leads should confirm autonomy classification for each PSP before the July readouts — the specific human-in/on/out-of-the-loop language used will signal whether 3000.09 compliance has been formally adjudicated or whether demos proceed under undisclosed waivers.

[GOVERNANCE] Gap — Section 1533 CFT status: Whether CDAO has a draft charter in internal review or intends to let June 1 pass silently is unknown. Matters because: the entire FY26 model-assurance framework rests on this team, and FY27 NDAA provisions drafted at the June 4 markup will assume its existence. Watch for: any CDAO communication or HASC staff inquiry before June 2; silence through June 2 is itself reportable.

[EXPORT] Gap — BIS replacement rule timeline and model-weight scope: No Federal Register pre-publication notice, ANPRM, or Under Secretary statement clarifies whether model weights will be controlled, decontrolled, or deferred. Matters because: if BIS uses Interim Final Rule procedure as Morrison Foerster anticipates, the compliance window will be days. Watch for: any BIS Federal Register filing or H.R. 6996 incorporation into the FY27 NDAA chairman's mark.

[AUTONOMY] Gap — PSP 3000.09 compliance posture and Sec. 1061 waiver report: The NDAA 2025 Sec. 1061 waiver disclosure report (due December 31, 2025) has not been confirmed delivered to Congress, and PSP autonomy classifications are not public. Matters because: if July demos involve autonomous functions operating under undisclosed waivers, the oversight gap becomes a political liability under the new Vatican-amplified scrutiny. Watch for: DepSecDef or CDAO framing language ("human-on-the-loop" vs. "human-in-the-loop") in demo readouts.

[INTEGRATION] Gap — Common operating rules across eight IL6/IL7 vendors: No public baseline for logging, retention, red-team, or portability requirements across the cleared vendors. Matters because: program managers cannot defensibly assess switching costs or vendor lock risk without it. Watch for: JWCC task-order language or a DISA security baseline.

• [GOVERNANCE] If CDAO does not publish a Section 1533 CFT charter or acknowledgment by June 1, 2026 → first confirmed NDAA FY2026 AI governance miss is on record; HASC/SASC staff will have grounds to insert mandatory reporting into H.R. 8800 at the June 4 markup, and the January 9 objectivity benchmark loses its enforcement mechanism.
• [EXPORT] If H.R. 6996 (Full AI Stack Export Promotion Act) language is incorporated into the HASC chairman's mark on June 4 → Congress sets a legislative floor that constrains the BIS replacement rule's scope on model weights; allied-sharing acquisition contracts require immediate legal review against the new statutory baseline.
• [AUTONOMY] If DoD, State, or NSC issues an on-record response to Magnifica Humanitas before the June UN LAWS session → U.S. diplomatic posture on autonomous weapons is fixed in public; absent such a statement, allied delegations will read silence as accommodation and may harden their positions.
• [INTEGRATION] If the July 2026 PSP demonstrations are framed in DepSecDef communications as "prototype" or "paper" reviews rather than live operational demonstrations → the January 9 "wartime speed" mandate has slipped its first milestone, and the Barrier Removal Board's waiver authority will face FY27 markup scrutiny.

The Section 1533 CFT assessment rests on absence of evidence (no CDAO communication, no Federal Register notice) — assess with moderate confidence the deadline collision is real but cannot rule out unannounced internal standup. The June 4 HASC markup is Tier 1 (committee calendar); H.R. 6996 trajectory inside that markup is single-source EDGE signal. BIS analysis is grounded in Tier 1 BIS actions and Tier 2 law-firm assessments — the model-weight gap is well-sourced; the replacement rule timeline is genuinely unknown. The Vatican encyclical is Tier 1; the U.S. response is unobserved. The CDAO open-source classified statement is attributed to a named official (Michael) but the SAM.gov RFI referenced in EDGE could not be independently verified in the coverage window and is flagged accordingly. No Tier 1 regulatory filing emerged in the past 24 hours — the brief's dominant signal is structured silence on three live deadlines.

Word count: ~1,380