DoW Instruction 8430.01 took effect September 8, 2026 and makes machine-readable software evidence a condition to operate on DoW networks. Suppliers have disclosure duties too: critical or actively exploited vulnerabilities must be reported within a timeframe the DoW CIO sets (§3.5.h(2)). If you supply software to DoW, vulnerability disclosure is now part of the deal. https://anchore.com/blog/dow-instruction-8430-01-makes-software-evidence-a-condition-to-operate/ #SoftwareSupplyChain #SBOM