Solicitations increasingly require vendors to disclose AI use, document decision-making role, and show risk mitigation. AI used in consequential decisions must be explainable, with documented model lineage and bias testing. AI components hosted for federal environments increasingly need FedRAMP authorization — commercial LLM endpoints may not automatically qualify.