Two developments converged this week on the Chinese AI lab DeepSeek: a federal order removing its products from United States civilian government systems, and a model release that made the company considerably harder to avoid.
The order came from the Department of Homeland Security, published in the Federal Register on October 20 under the Federal Acquisition Supply Chain Security Act. It directs federal civilian agencies to exclude DeepSeek products and those of its affiliates from procurement and to remove them from agency information technology systems, or seek an exception. Exceptions must be filed within 60 days with a justification and proposed mitigations; CISA reviews and approves or denies in writing. The order covers "all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations."
An order with an unclear edge
The scope is where the difficulty lies. The Register noted that it is not clear which third-party products and services have been developed using DeepSeek's wares, nor whether "developed using" means providing ongoing API access to DeepSeek models or simply refers to any application vibe-coded with DeepSeek's help. An AI software bill of materials does not record which tools developers used, so the requirement would in practice require every vendor to attest that nothing it relies on ever touched DeepSeek.
The order also leaves AI gateways in a grey zone. OpenRouter and Vercel AI Gateway both route requests to whichever provider they judge best; an agency could find itself using DeepSeek models without intending to. Katie Moussouris, founder and chief executive of Luta Security, told The Register that banning DeepSeek's own app and API is workable, but that the reach to third-party products "exceeds that requirement in ways that aren't practical." Her objection is less to the ban itself than to what cannot be verified: whether a piece of software was written with DeepSeek in the loop leaves no auditable trace.
Her further concern was that the order's own rationale — data flowing to DeepSeek's servers in China, the company's data collection, its app — does not obviously extend to United States-hosted versions of the same models.
The official justification cites concerns about Chinese government access to DeepSeek infrastructure, personal information collection and user tracking, potential transfer of sensitive government data to China, and possible malware in DeepSeek models, citing a February 2025 NowSecure report that found unencrypted data transmission, weak encryption and insecure local storage in the DeepSeek iOS app, along with data sharing with ByteDance.
The order does not extend to private or consumer use.
A model that raised the stakes
On October 17, DeepSeek released DeepSeek-V4.1-Flash-1017, an update to the Flash model introduced on September 10. The weights are MIT-licensed and published on Hugging Face and ModelScope; the model is live on DeepSeek's website, app and API, with no change to API pricing.
The gains, on DeepSeek's own reporting, were across all eleven benchmarks it published. The largest movement was in agentic coding and automation: Terminal-Bench 4.0 rose 11.1 points from 31.2 to 42.3, a 36 percent improvement, and ProgramBench rose 8.8 points to 29.1, a 43 percent improvement. Humanity's Last Exam without tools rose 5.8 points to 42.6. DeepSWE v1.1 rose 2.8 points to 77.0. The smallest movements were on the image benchmarks and on DeepSWE, where the absolute numbers were already high. DeepSeek also reported faster task completion and shorter outputs than the September version, describing the release as a Pareto improvement in performance and cost.
In DeepSeek's own comparison table, the new model beats Kimi K3 on ten of eleven tests and GPT-5.6 Sol on nine, while trailing Opus 5 on seven. Those are the company's numbers from its model card and API change log, and they have not been independently verified.
Independent evaluation tells a flatter story. Vals AI places DeepSeek V4.1 Flash 1017 eighth of twenty-four models on its index at 61.26 percent, with a cost per test of $0.657 and a measured latency of 39 minutes 55 seconds. Its strongest placement is fifth of seventy-three on Tax Agent Bench, at 44.35 percent. Terminal-Bench 4.0 comes in at 31.82 percent on that harness — well below the 42.3 the company reports, a reminder that agentic benchmark results move with the harness. The model carries a one-million-token context window, up to 384,000 maximum output tokens, and pricing of $0.15 per million input tokens and $0.60 per million output at off-peak rates, with peak rates double.
The architecture underneath
The September release had introduced an asymmetric design that made the Flash tier cheap: a 552-billion-parameter mixture-of-experts model with a causal encoder-decoder architecture, using only 8 billion active parameters for input and 16 billion for output. The KV cache was cut to a quarter of the HBM and an eighth of the SSD storage of the previous generation, which matters because cache-hit charges account for a large share of agent costs.
The company is phasing out V4-Pro, which it says multiple third parties tested ahead of V4-Pro on performance, cost, speed and total runtime. Requests to deepseek-v4-pro have routed to V4.1-Flash since September 14 at V4.1-Flash rates, and will continue until V4.1-Pro launches.
The 1017 build is optimised for DeepSeek Harness, Tencent CodeBuddy and WorkBuddy, with DeepSeek recommending harness v0.2.1-rc.1 or later. Search and Fetch APIs are now open to everyone, powered by the company's own in-house search engine.
Why the two stories belong together
The order and the release are usually filed under different headings — one geopolitics, one engineering — but they land on the same week for a reason. The ban targets an American government procurement problem: provenance of AI software, and the impossibility of auditing which models a piece of code was written with. The release is a direct answer to a different version of the same question, from the other direction. DeepSeek's pitch is that a model cheap enough to run everywhere, fast enough to finish tasks, and good enough at agentic coding should be the default choice, and the company made the economics work this month.
A federal order restricting DeepSeek to a narrow set of agencies does little about where its models end up in the private sector, where the economics still favour them. The gap between the two is the live question: procurement rules can exclude a supplier, but they cannot exclude a cost advantage.