CMMC Phase 1 is live and DOJ is treating SPRS affirmations as federal representations. What defense contractors and subcontractors need to know before Phase 2 hits.