Disclaimers and official links

What AI-Guardrails is not

• Not affiliated with, endorsed by, or sponsored by the Department of Defense, any military service, any combatant command, or any CMMC accreditation body.
• Not a C3PAO. Not a registered practitioner organization (RPO). Not a certified CMMC assessment. Not a substitute for one.
• Not legal advice, tax advice, or export-control advice. Not a DFARS clause dump. Not a SPRS scoring calculator.
• DoD and service marks are not used on this site. Their absence is intentional.
• Not a software subscription, client portal, or chatbot that signs on the owner’s behalf.

No guarantees

These materials do not guarantee a CMMC status, an SPRS score, a contract award, an option exercise, a clean DIBCAC review, or a passed government assessment. Completing the checklists does not mean you are “certified.” Official rules change. You are responsible for the solicitation you are bidding and the systems you operate.

There are no testimonials, case studies, client logos, or “as seen with” names on this site. None are being offered. Do not treat marketing copy as a past-performance claim.

Unclassified templates only

The packs do not contain classified information, CUI, CUI samples, ITAR/EAR technical data on defense articles, weapons designs, malware, or exploit/attack procedures. Do not store, transmit, or sample CUI inside the template files. Facility and personnel clearances are out of scope except this line: if the solicitation requires them, start with official DCSA pages.

Operator Assist limits

Optional template fill from answers the shop provides (CAGE, SAM status they paste, where evidence lives). We do not log into SAM, do not post SPRS, do not handle CUI or classified, and do not claim CMMC certification. The owner still signs SPRS, proposals, and incident reports. Offered by referral / partner intro. There is no second checkout on this site. Full Assist page.

Educators, Gate-Zero, and names

We do not copy anyone’s course. Gate-Zero Pack (Partner Edition) is a coming leave-behind SKU — homework after class, not a replacement for class. We do not list educator names, logos, or implied endorsements on this public site unless that person has said yes in writing. Pointing students here is not an endorsement. Partner page.

CMMC snapshot — as of 31 August 2026

This is a dated reading aid, not a substitute for the Code of Federal Regulations. Confirm before you bid. Phase II is paused. Phase I is not.

• The DFARS rule putting CMMC into contracts (including DFARS 252.204-7021) took effect 10 November 2025 (90 FR 43560, 10 September 2025, document 2025-17359).
• The CMMC program rule at 32 CFR part 170 took effect 16 December 2024. Implementation was phased. Phase I began 10 November 2025.
• On 13 July 2026 the Department announced immediate suspension of CMMC Phase II requirements (C3PAO third-party assessments, originally scheduled to begin 10 November 2026). Later milestones were held as well. Confirm current exercise of that discretion on the official CMMC page — a memorandum is not the same as a Code change.
• Phase I self-assessment remains in force for applicable contracts (Level 1 self-assessment / FAR 52.204-21; Level 2 self-assessment against NIST SP 800-171 Rev 2).
• NIST SP 800-171 Revision 2 (110 requirements) remains the scored CMMC Level 2 baseline under 32 CFR 170. NIST has published Revision 3 and marks Rev 2 withdrawn as its current SP; that is a NIST publication status, not a CMMC scoring change. Do not score Rev 3 as if it were in SPRS unless DoD formally adopts it.
• Underlying safeguarding and reporting under DFARS 252.204-7012, SPRS posting under 252.204-7019 / 7020, and False Claims Act exposure for false cybersecurity representations are not “paused” by the Phase II suspension. Confirm on the official texts.

AI-Guardrails is not the Department and does not speak for it. If this snapshot and an official page disagree, the official page wins.

Official links

• About CMMC (DoD CIO) https://dodcio.defense.gov/cmmc/About/ — live program status, including the 13 July 2026 Phase II suspension notice.
• DFARS CMMC acquisition rule (90 FR 43560) https://www.govinfo.gov/content/pkg/FR-2025-09-10/html/2025-17359.htm — published 10 September 2025, effective 10 November 2025. Document 2025-17359.
• 32 CFR part 170 — CMMC Program https://www.ecfr.gov/current/title-32/part-170
• DFARS 252.204-7021 Contractor compliance with CMMC level requirements (NOV 2025).
• DFARS 252.204-7012 Safeguarding covered defense information and cyber incident reporting.
• NIST SP 800-171 Revision 2 (updated 28 Jan 2021) https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final — 110 requirements; still the CMMC scored baseline as of this snapshot. NIST current SP is Rev 3; CMMC has not adopted it for scoring.
• SAM.gov Entity registration, UEI, representations and certifications.
• Supplier Performance Risk System (via PIEE) https://piee.eb.mil — SPRS scores and CMMC affirmations as required by the clauses.
• National Archives — CUI program https://www.archives.gov/cui — governmentwide CUI registry and marking. Not a how-to for storing CUI in this pack.

Checkout and contact

The live shop SKU is the Warfighter Delivery Pack, $49 USD, one-time digital download, via Lemon Squeezy. This site does not collect card numbers. Purchase does not include a software account, chatbot, assessment platform, or managed SPRS filing.

Gate-Zero Pack (Partner Edition) is a coming leave-behind SKU. There is no second checkout URL on this site.

There is no public mailbox published on this domain. Educators write from the email on their own site. Partner page.

$49 — Get the pack