What EO 14392 actually says.
On March 13, 2026, the White House signed Executive Order 14392, "Ensuring Truthful Advertising of Products Claiming to be Made in America." It does two things.
First, it directs the Federal Trade Commission to prioritize enforcement against sellers and manufacturers that make false or unsubstantiated origin claims. Second, it tells every agency that runs Government-wide acquisition contracts, Multiple Award Schedules, and indefinite-delivery contracts to periodically review and verify Buy American Act claims. Vendors found misrepresenting origin are removed from procurement availability and referred to the Department of Justice.
The FTC standard for origin labels is unchanged: a product must be "all or virtually all" made in the United States before it can use that claim. What changed is the enforcement posture. The sticker is now a legal claim, and the penalty for getting it wrong is criminal referral plus a procurement ban.
How it stacks with the FCC router rules.
EO 14392 does not exist in a vacuum. Ten days after it was signed, the FCC added foreign-produced consumer routers to the Covered List framework and issued waiver DA-26-286 for already-authorized devices. On May 8, 2026, FCC DA-26-454 extended that update path until at least January 1, 2029 and expanded it to analogous Class II software and firmware changes that mitigate consumer harm. In April, the White House signed a federal-contracting reform order to centralize procurement and tighten audit pipelines. In May, the administration signaled zero tolerance on Buy American waiver loopholes.
Read together, the message is consistent. Federal procurement is closing around genuinely domestic supply chains. Hardware origin matters. Firmware origin matters. The label has to be true, and "true" means "all or virtually all," not "we screwed the board on in Texas."
EO 14392 (March 13, 2026): false origin claims trigger FTC enforcement and DOJ referral. Procurement contracts audited for Buy American claims.
FCC DA-26-286 and DA-26-454: foreign-produced consumer routers enter the Covered List framework, while already-authorized covered devices keep a qualifying software and firmware update path until at least January 1, 2029.
Federal Contracting Reform EO (April 2026): GSA consolidation of procurement, easier centralized audits.
What "all or virtually all" means for a router.
A router that ships with a US-assembled board running offshore-developed firmware is not "all or virtually all" made in the USA. Under the FTC standard, the dominant cost and component origins both matter. Firmware is not an afterthought, it is the operating system of the device, and it is the layer most exposed to security audit.
For organizations that have to certify origin, the risk is no longer a simple 2027 cliff. The updated FCC posture is more precise: new covered foreign-produced devices remain constrained, existing authorized covered devices can keep receiving qualifying updates until at least 2029, and vendors using unsupported origin labels on a device whose firmware was developed elsewhere are now in scope for FTC enforcement plus DOJ referral.
Who has to pay attention.
Anyone who sells to the federal government, anyone who claims a domestic-origin preference in their procurement, anyone whose network sits in a regulated environment that maps onto federal standards.
Federal contractors and subcontractors carrying procurement obligations.
State and municipal procurement that mirrors federal Buy American rules.
Critical-infrastructure operators in regulated sectors (banking, healthcare, energy, transportation).
Service providers and MSPs whose customers will start asking for origin documentation.
Hardware vendors with foreign firmware who currently advertise USA assembly.
The upgrade path that already exists.
US-developed firmware on existing hardware is the only practical way to bring a fleet into compliance without ripping out the boards. Airfy OS runs on many device models. Flash it over the air and a foreign-origin router becomes a domestically managed, continuously patched, AI-audited network device with a firmware supply chain that holds up to procurement audit.
A mature firmware path. Service-managed OS, MCP tools for AI-driven operation, and production deployment experience. Not a future product. The path is in market today.
Disclosure.
This article summarizes publicly available executive orders and FCC documents. It is not legal advice. Verify origin status and Buy American Act compliance with counsel for your specific procurement context.