Comment by anigbrowl

I noticed that. Vendors will have to certify that neither they nor their upstream suppliers use anything made with Deepseek, even if it's provably innocuous ('Deepseek write 'Hello World' and 5 implementations of fizzbuzz'). So basically this is the government leveraging its monopsony power rather than a real safety requirement. They'll probably do the same for Qwen, MM, GLM etc.

This is potentially quite effective at corporate levels but I don't see it being effective over the long term because there are too many small-medium users that don't need to care about supply chain certification.