The maritime arms of the US government are already inside the mandate and inventorying their own AI on the record: the Coast Guard under ALCOAST 103/25, the Department of Transportation through its open use-case dataset, and documented Coast Guard use cases such as RMF Automation, which cut cybersecurity authorisation processing times by more than half. The direction of travel is set from the centre.
What the mandates ask of an individual office is local: an inventory that is true, a written policy, named checkpoints, training records and a review cycle. Under a written position, AI already does defined work across the office, each task with a named human check before it is relied on.