2026 was the year the SBIR program was reauthorized through 2031, FedRAMP-authorized LLMs became real in three clouds, and the NIST 800-53 control mapping for AI systems finally started to stabilize. The posts below document what mattered, in the order we published them.