I think the draft NDAA blocks running Chinese models on American hyperscaler hardware, but it's principally because they were using it to bypass chip export restrictions.

I don't think any Federal agencies are using DeepSeek inference, but many State agencies would be, primarily through third party services. Of more concern is the critical or financially important infrastructure which is enabled by Chinese models. Banking, ecommerce, retail.