FedRAMP contracts require all inputs being FedRAMP compliant and a vetted BOM. Anthropic is no longer FedRAMP high and because it is declared a supply chain risk now all our FedRAMP contracts are at risk and any company who has FedRAMP customers is at risk too.
Possibly Claude has already touched too much code, so this will be very interesting.