Field notes on CMMC, SBIR, AI policy, and productization — for defense contractors who want signal, not noise.