Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →
logo
Get CLEATUS
All Posts
July 2026 GovCon Review: Fixed-Price Becomes the Default, CMMC Stops, and Set-Asides Get Squeezed

July 2026 GovCon Review: Fixed-Price Becomes the Default, CMMC Stops, and Set-Asides Get Squeezed

Author:Mithat Cakmak
Published:
Category:Insights

Most months in federal procurement produce headlines. July 2026 produced homework. On July 15 the preference for firm-fixed-price contracting took effect, which means every new solicitation for anything else now needs an approved justification before it goes out the door. Two days earlier the Pentagon suspended CMMC Phase 2 outright. On July 30, SAM.gov disclosed that it had been computing the wrong small business size standards in the representations and certifications tables for four months of registration renewals. And somewhere in the last week of the month, OMB sent Congress a package that would move more than 100,000 transactions a year out of statutory set-aside coverage. This July 2026 GovCon review covers what changed, what is merely proposed, and the four things worth doing in August.

TL;DR

  • Firm-fixed-price is now the default contract type. Revised FAR Part 16 deviation text took effect July 15, 2026 under Executive Order 14402. New solicitations for anything other than fixed-price require an approved justification before release. Existing contracts with 18 or more months of performance remaining have until July 15, 2027.
  • CMMC Phase 2 is suspended, not canceled. The July 13 announcement paused third-party certification, not the underlying security obligation. DFARS 252.204-7012 and the SPRS self-assessment clauses are untouched.
  • Check your SAM.gov size representations if you renewed between March 24 and July 22, 2026. A system error produced incorrect NAICS size standards in the FAR 52.219-1 and 52.212-3 tables. A wrong size representation is a false certification, and the error was yours to inherit.
  • Thresholds moved up all month, and set-asides are the collateral damage. TINA jumped to $10 million on July 1. The House passed a bill raising the simplified acquisition threshold to $500,000. OMB's legislative package would take it to $10 million for commercial buys by 2030, and says plainly those buys "would not be subject to statutory small business set-asides."
  • The 8(a) pipeline is effectively frozen. Senators objecting to the overhaul on July 19 cited 8(a) certification approvals down 92%, with none issued since August 2025. Do not build an FY2027 capture plan around getting newly certified.
  • FY2027 is headed toward a continuing resolution, but the terms are not final. The House passed a CR on July 21 funding most of government at flat FY2026 levels through December 4, while the Senate is working from a December 11 endpoint. Neither date is law yet. Plan for first-quarter award disruption, but do not treat the current deadlines as settled.
  • Two of July's largest IT awards ran through existing vehicles, not new competitions. If you are not on a GWAC, an $821 million task order and a $7 billion enterprise agreement were both invisible to you. CLEATUS tracks vehicle activity and task-order flow so the pipeline you can actually reach stays visible.

Six Rule Changes in One Month Is a Full-Time Job

CLEATUS reads every solicitation's actual clauses and contract type, tracks vehicle and task-order activity, and surfaces the opportunities you can win under the rules as they are today.

Book a Demo →

The Biggest July 2026 GovCon Change: Fixed-Price Became the Default

If you read one thing in this review, make it this section. It changes how your next recompete gets priced.

On July 1, 2026, the FAR Council published guidance and updated model deviation text for FAR Parts 16 and 52, implementing Executive Order 14402, signed April 30, 2026. Agencies had to update their class deviations by July 15, and the revised Part 16 language took effect that day. The Department of War issued its own Class Deviation 2026-O0045 Rev. 1 covering FAR 16 and DFARS 216, effective immediately.

The operative change is procedural, which is exactly why it will bite. A contracting officer who wants to award anything other than a fixed-price contract now needs an approved justification before the solicitation is released. Not at award. Not during negotiations. Before the RFP goes out. Conforming changes landed at FAR 16.301-3 and 16.401-2.

Two timing details matter for work you already hold. For solicitations issued before July 15 but not yet awarded, and for existing contracts and orders with 18 or more months of performance remaining, the justification requirement has a backstop deadline of July 15, 2027. That is a year of runway, and it is also a year in which your contracting officer may find it easier to convert scope to firm-fixed-price than to write the paperwork defending time-and-materials.

What this actually costs you. Fixed-price transfers performance risk from the government to the contractor. If your business runs on T&M or cost-reimbursable services, the practical effect is that a category of work you have historically priced with a labor-hour cushion will increasingly come to you as a fixed deliverable with a fixed number. Firms that price the new risk correctly will look expensive next to firms that have not noticed the rule changed. Firms that price it incorrectly will win and then discover the margin is not there.

The defensible response is not to refuse fixed-price work. It is to get much sharper about scope: read the performance work statement for the ambiguities that become your cost overrun, and price the uncertainty explicitly rather than hoping for equitable adjustments that a fixed-price vehicle will not readily give you.

The Rest of the FAR Overhaul Is Still Only Proposed

Be precise here, because the overstated version of this story is already circulating. The comment period on the first formal rulemaking tranche closed July 23, 2026. That tranche covered four proposed rules rewriting 20 FAR parts, published June 23: Case 2026-001 (Parts 1, 2, 4, 33, 39, 40, 52, 53), Case 2026-002 (6, 7, 10, 18, 26, 37, 41), Case 2026-005 (5, 24, 29), and Case 2026-007 (3, 49).

Public engagement was thin. Roughly 109 comments were posted across all four rules, with Case 2026-001 drawing the most at 45. For rules rewriting a third of the FAR, that is a remarkably small record, and it means a well-argued comment from a single small contractor carries unusual weight in the next tranche.

No second batch of proposed rules published in July. Parts 8, 12, 13, 15, 16, 19, and 42 are slated for later batches. Part 19 is the small business part, and it has still never been through public notice and comment.

The thing to internalize: what governs your buying agency today is its own class deviation text, not the FAR and not any proposed rule. Two agencies can be running different versions of the same FAR part on the same day. When a newsletter tells you "the new FAR says," the right question is which agency and which deviation revision. We covered this dynamic in detail in our analysis of what the FAR Part 5 rewrite does to award announcements, including why the widely repeated claim that the announcement threshold is rising from $4.5 million to $5.5 million is wrong.

CMMC Phase 2 Stopped, and the Obligation Did Not

July's loudest story was the Department of War suspending CMMC Phase 2 on July 13, two months before it was due to take effect. We covered what is suspended, what still binds you, and how to use the window in a full breakdown: CMMC Phase 2 Suspended: What the Department of War Pause Means for Contractors. The one-line version for this review is that suspended is not canceled, and Phase 1 self-assessments, DFARS 252.204-7012, the SPRS clauses, and all 110 NIST SP 800-171 Rev 2 controls remain in force.

What that article could not yet cover is the split it leaves behind. DFARS still points contractors to NIST SP 800-171 Rev 2, while the proposed civilian CUI framework in FAR Case 2026-001, whose comment period closed July 23, points to Rev 3 with a new FAR Part 40 and a 72-hour incident reporting window. If you sell to both defense and civilian agencies, you are on track to maintain two different control baselines against two different revisions of the same standard.

The SAM.gov Error That Could Invalidate Your Size Representation

This is the most actionable item of the month and it received almost no coverage.

On July 30, 2026, SAM.gov posted an alert disclosing a NAICS Code Size Table Discrepancy. A system error produced incorrectly computed NAICS size standards in the FAR 52.219-1 and 52.212-3 representations and certifications tables for entity registration renewals submitted between March 24 and July 22, 2026. SAM corrected the error and emailed affected entities with a subject line beginning "Action Required."

Why this is not a clerical footnote: your size representation is a certification. If you renewed your registration in that window and the table told you that you qualified as small under a NAICS code where you do not, and you then submitted a bid carrying that representation, the government's record shows you certified to something untrue. The error originated with the system. The certification is still in your name.

If your renewal falls in that window, pull your current representations, confirm your size status against the SBA size standards table for every NAICS code you bid under, and correct anything that does not match before your next submission. Check your spam folder for the notification email as well.

While you are in your registration: OMB's legislative package includes a proposal to let GSA charge non-federal users up to $50 per year to maintain a SAM.gov registration. Registration has been free since inception. This is a proposal, not a rule, but it signals a direction.

Thresholds Went Up All Month, and Set-Asides Are the Collateral Damage

July was a sustained exercise in raising dollar thresholds. Individually each change is defensible. Read together, they describe a market where more buying happens with fewer procedural obligations attached, in exactly the dollar band where most small primes live.

ThresholdWasNow (or proposed)Status
TINA certified cost or pricing data$2.5M$10MIn effect for contracts entered after June 30, 2026
CAS basic applicability$2.5M$35MFY2026 NDAA Section 1806
Simplified acquisition threshold$250,000$500,000, phasing to $10M for commercial by 2030House-passed bill; OMB proposal. Not law.
Micro-purchase threshold$10,000$25,000, proposed to $100,000 by 2030House-passed bill; OMB proposal. Not law.
Civilian task-order protest threshold$10M$35MOMB proposal. Not law.

The TINA change took effect July 1, 2026 under FY2026 NDAA Section 1804(c), raising the certified cost or pricing data threshold from $2.5 million to $10 million for contracts entered into after June 30. One trap worth flagging: contracts signed on or before June 30 keep the $2.5 million threshold, including their subcontracts, regardless of when the subcontract is dated. If you are a sub on a prime contract signed in June, you are still on the old rule.

On July 8, a final rule conformed Cost Accounting Standards to GAAP, rescinding CAS 408 and CAS 411 entirely and removing most of CAS 404 and 409, effective August 7, 2026.

On July 20, the House passed the FIT Procurement Act (H.R. 4123) under suspension, raising the simplified acquisition threshold from $250,000 to $500,000 and the micro-purchase threshold from $10,000 to $25,000. There is no Senate companion bill, so this is not law.

Then, in the last stretch of July, OMB sent Congress 20 acquisition reform legislative proposals. The package would take the SAT to $500,000 for all acquisitions and phase it to $10 million for commercial products and services by 2030, raise Special Simplified Procedures from $5 million to $50 million, raise micro-purchase to $100,000 by 2030, and shift the GSA Schedule standard from "lowest overall cost alternative" to best value.

Here is the sentence small businesses need to read twice. OMB acknowledged that a $10 million commercial SAT would capture an additional 14.6% of federal spending, over 100,000 transactions a year, and that those buys "would not be subject to statutory small business set-asides." The small business reservation remains decoupled and frozen at $350,000.

That is not a hidden consequence. It is stated in the proposal. If it becomes law, the mechanism that has reserved a floor of federal buying for small firms stops covering a large and growing share of the market.

Small Business Programs Are Under Real Pressure

The threshold story is the structural threat. The program story is the immediate one.

The 8(a) pipeline has effectively stopped. On July 19, Senators Markey and Hirono formally objected to SBA's 8(a) overhaul, citing 8(a) set-aside dollars down 29%, certification approvals down 92% with none issued since August 2025, and document demands sent to 4,300 current participants. Separately, the comment period closed July 13 on SBA's proposed rule removing the rebuttable presumption of social disadvantage for individually owned 8(a) firms, replacing it with a self-certified, evidence-based group-harm test. Entity-owned firms owned by tribes, ANCs, NHOs, and CDCs are unaffected.

The planning implication is blunt: if your FY2027 strategy depends on obtaining 8(a) certification, you need a second strategy.

HUBZone redesignated areas expired July 1, 2026. Areas that lost qualified status in the July 1, 2023 map refresh had a three-year grace period under 13 CFR 126.105, and it ran out. Firms are not stripped instantly. Eligibility ends at your next annual attestation or three-year recertification after July 1, 2026 if your principal office no longer qualifies. Contracts awarded while you were eligible are protected for the life of the contract, and the 35% resident test is unchanged. If you hold HUBZone status, check your principal office against the current map before your next attestation, not after.

On the enforcement side, SBA's data-driven eligibility sweep continued, with an expanded Palantir deployment announced July 14. We covered the mechanics and what it means for teaming diligence in The SBA Fraud Crackdown Goes Algorithmic.

Three pieces of genuinely good news. Effective July 2, task orders awarded under 8(a) STARS III may now perform through July 1, 2034 instead of July 1, 2031, a three-year extension of runway on every new task order, though the ordering period still closes July 1, 2029. SBA doubled the combined 7(a) and 504 loan cap from $5 million to $10 million, effective July 4. And SBIR/STTR remains reauthorized through September 30, 2031, following the April 2026 action that ended the lapse. If you have been sitting out the program during the uncertainty, our 2026 guide to finding SBIR and STTR opportunities is a reasonable place to restart.

Worth noting for anyone tracking rulemaking: zero SBA rules, proposed or final, published in the Federal Register during July 2026. All 38 SBA documents that month were notices. The 8(a) action is happening through operational decisions and one June proposed rule, not a stream of new regulation.

Where the July 2026 GovCon Dollars Actually Went

The month's largest actions did not run through new competitions, and that is the lesson.

The single biggest was a $53.9 billion modification to Lockheed Martin on July 29, converting a one-year undefinitized action into a seven-year multiyear PAC-3 MSE production agreement worth $58.62 billion total through March 2035, with production tripling to roughly 2,000 missiles per year by 2030. For anyone in missile components, machining, or electronics, a seven-year locked-in ramp across 15 states is the clearest qualification signal you will get this year.

In technology, on July 9 Accenture Federal Services won an $821 million, five-year task order to integrate the War Data Platform, the rebranded Advana program managed by CDAO. It was awarded through GSA Alliant 2, beating four commercial bidders. On July 23, Oracle America received a Department of War Enterprise Software Initiative agreement worth $3.31 billion base and roughly $6.99 billion with options over ten years, consolidating Oracle usage across the department, the Coast Guard, and the Intelligence Community, with projected savings of $441 million. On July 15, Lockheed Martin took the $10.5 billion, 12-year SOF GLSS II logistics recompete at USSOCOM as a single-award IDIQ, which means the only way into that work through 2038 is as a subcontractor. Four teams bid, so three losing teams are re-forming right now.

If you are not on the vehicle, none of those pursuits existed for you. This is the structural argument for treating vehicle access as capture strategy rather than paperwork, and it is why we wrote a full guide to winning task orders through OASIS+ and GSA eBuy.

Two counterexamples are worth studying, because both show open doors.

On July 14, Sawasawa LLC, a small business, won a $763 million maximum IDIQ from DLA Troop Support for physical fitness gear, with ordering through July 2031 across all six services. The announcement stated that other contracts are expected to be awarded under the same solicitation, meaning the pool is still adding awardees. On July 9, CMS awarded RMADA 3, a $3.5 billion, five-year BPA for research and data support. Thirty-four firms bid, seventeen won, and four of the seventeen seats went to companies that were not incumbents. A recompete where incumbency was not decisive, on a ceiling nearly triple its predecessor, is the profile of an opportunity worth chasing.

Other July activity worth logging: TSA's Gold+ airport screening IDIQ, a 10-year multiple-award commercial vehicle with a $12.9 billion ceiling, took proposals through July 23 with performance beginning September 28, 2026, though the guaranteed minimum is only $5,000 per awardee, so the real value is entirely downstream. The Space Force tripled the NSSL Phase 3 Lane 1 ceiling from $5.6 billion to $17 billion on July 17, ten days after on-ramping two new emerging providers, raising planned launches from 60 to 170. And OASIS+ holders had a hard deadline: Amendment 0009 required a signed SF 30 by July 15 or an offer was ruled ineligible.

At GSA, the OneGov program reported $1.18 billion in identified savings since its April 2025 launch, across roughly two dozen OEM agreements at 70% to 90% discounts. GSA signaled it wants to expand OneGov beyond software. For small IT resellers, this is a margin warning: direct-to-OEM discounting compresses the license markup many firms live on. The defensible ground is integration, migration, training, and adoption services, not the license itself.

Protests Are Being Pushed Out of GAO

Three separate July developments point the same direction.

OMB's legislative package would raise the civilian task-order protest threshold from $10 million to $35 million, matching DoD, and would extend FY2026 NDAA Section 875's 5% payment withholding to all agencies. We covered the mechanics of that withholding provision in The New 'Loser Pays' Bid-Protest Rule.

The FAR Part 33 rewrite, whose comment period closed July 23, would make agency-level protests more attractive by requiring the agency to give a protester a redacted source selection decision and allow a supplemental statement, reviewed by an independent official.

And on July 27, the Court of Federal Claims adopted 2026 RCFC amendments effective immediately and applicable to all pending cases. Protest-specific changes require prefiling notices to disclose known related COFC cases and attach a notice to the seven-day administrative record deadline. Court-wide, RCFC 5 and 5.3 eliminated the grace period for certificates of service.

Read together: push protests down to the agency level and out of GAO. For a small business whose entire pipeline is task orders under $35 million on OASIS+, Alliant, or MAS, a $35 million civilian threshold would remove GAO as a remedy for essentially every award it competes for.

Which makes July's largest protest fight instructive. On July 8, the Army's $50 billion MAPS vehicle, the Marketplace for the Acquisition of Professional Services, drew seven GAO protests from Kearney & Co., Manutek, NextGen Federal Systems, Integral Federal, Cinteot, Alpha Tech Alliance, and JAAW Group. The objections targeted the self-scoring scorecard, restrictive requirements, how small business subcontract credits are counted, and a 5 MB submission cap that the blank scorecard alone exceeds. Decisions are expected between mid-September and mid-October 2026, and the Army's targeted September awards cannot proceed while the protests are pending. If your FY2027 plan assumes a MAPS seat, assume the schedule slips. MAPS is also the Army's real ITES-3S and RS3 follow-on path, so this is the vehicle competition that matters most for mid-size IT and professional services firms.

One bright spot for small innovators. On July 24, in Strategi Consulting LLC v. United States, the Court of Federal Claims held it has jurisdiction over SBIR Phase III protests, denying the government's motion to dismiss. The court distinguished a barred challenge to a task order from a reviewable challenge to work exceeding a task order's scope. If you have watched an agency develop your Phase II work through an affiliated vehicle instead of awarding you Phase III, that door is open.

FY2027 Is Headed Toward a Continuing Resolution

Plan around this scenario, because it could determine your first-quarter cash flow.

On July 21, 2026, the House passed H.R. 9770, the Continuing Appropriations Act 2027, by 220 to 205. It would fund most of government at flat FY2026 levels through December 4, 2026, with anomalies for WIC, the FEMA Disaster Relief Fund, Indian Health Service, wildfire suppression, and SBA loan programs. House Republicans drafted it without OMB's anomaly requests, so most administration-requested adjustments are absent. The Senate is working from a December 11 endpoint and adds anomalies the House bill lacks. As of August 10, the chambers have not sent the president identical CR text, so neither endpoint is enacted.

On the authorization side, the House passed the FY2027 NDAA (H.R. 8800) on July 22 by 216 to 212, with a $1.15 trillion topline. The Senate's version stalled: cloture on S. 4784 failed 50 to 46 on July 14, ten votes short. The largest House-Senate gap is military construction, $28.6 billion versus $50 billion.

What a flat CR would mean operationally is well understood and routinely underestimated. No new starts and no production rate increases during the CR window. Awards that depend on FY2027 increases would slip until the CR expires or Congress makes an exception. Expect an award drought in October through early December, then a compressed surge as agencies obligate against a shortened window.

There is a further exposure worth naming. The FY2027 defense plan assumes roughly $350 billion in mandatory money from a future reconciliation bill. Programs counting on that money have no appropriated home if reconciliation stalls. If your pipeline is weighted toward one of them, build the downside case now.

What to Do in August

Four concrete items, in priority order.

  1. Verify your SAM.gov size representations if you renewed between March 24 and July 22, 2026. Check the FAR 52.219-1 and 52.212-3 tables against the current SBA size standards for every NAICS code you bid under. This is a certification exposure, and it takes an hour.
  2. Reprice your T&M-heavy recompetes as fixed-price. Any solicitation issued after July 15 that would previously have been T&M is now a candidate for conversion. Model the margin under fixed-price with realistic scope-ambiguity assumptions before you see the RFP, not after.
  3. Check your HUBZone principal office against the current map before your next attestation or recertification, and treat your SPRS score as an audited number even though third-party assessment is paused.
  4. Move your capture calendar forward by a quarter. With both chambers considering CR endpoints in December, the opportunities that matter for FY2027 revenue are the ones you position for in August and September. Contractors who forecast recompetes 12 to 18 months out are the ones who will have a pipeline in January.

How CLEATUS Fits Into a Month Like This

The honest framing is that none of the above required a software product to understand. It required somebody to read roughly a dozen Federal Register documents, three class deviations, two roll call votes, and a SAM.gov system alert, and then work out which ones touch your specific NAICS codes, contract types, and agencies. Most small contractors do not have that person, and the ones who do would rather have them writing proposals.

That reading problem is what CLEATUS automates. The GovCon Copilot analyzes each solicitation's actual clauses and contract type, so when the fixed-price preference reshapes what agencies issue, you are bidding on what the document says rather than what a newsletter implied. Market intelligence is built from the award record, subaward filings, and obligation history, which is what makes vehicle and task-order activity visible even when the awards themselves never appear as public competitions. And Auto Capture keeps the pipeline moving on your strengths and past work while the rules underneath the market are being rewritten.

D2 Government Solutions cut opportunity discovery time by 75% and draft time by 80%, and now submits 3× the proposals without adding headcount.

– How D2 Government Solutions Tripled Growth Without Adding Staff

The contractors who came through the FPDS retirement and the bid protest changes in decent shape were the ones who had already stopped depending on any single channel, rule, or program staying the way it was. July 2026 is another entry in a long list of reminders that free, stable, government-provided structure is a policy choice, and policy choices get revisited.

Frequently Asked Questions

Book a Demo →

Further Reading

Customer Stories

About CLEATUS

CLEATUS is an agentic AI platform that helps government contractors discover the right opportunities, manage capture pipelines, and write winning proposals. Automate your GovCon operations end-to-end: build custom AI-powered automations that handle multi-step processes on autopilot, a force multiplier for your capture and BD team that works in the background while you stay in the loop on every decision. We aggregate federal, state, local, and city opportunities; our GovCon Copilot analyzes solicitations and your internal documents to deliver actionable market intelligence that drives revenue growth.