Ropes and Gray analysis of Governor Newsom’s 30 March 2026 Executive Order N-5-26 explains its requirement that AI vendors seeking California state contracts attest to safeguards on bias civil liberties and illegal content. The order also directs the state CISO to review federal supply chain risk designations independently, a provision widely read as a response to the Pentagon’s designation of Anthropic as a supply chain risk. Certification recommendations are due within 120 days. The authors note the order positions California procurement standards as potential de facto national benchmarks given the state’s market size.