Not all products will be fully compliant. Some sole source products are almost completely non-compliant. Yet agencies need ICT to do their jobs. How about letting agencies purchase products that are not fully compliant under the following conditions:
1. The vendor commits to a remediation plan with an enforceable timetable.
2. The vendor provides all testing results, workarounds, tips & tricks,etc. that can aid in accommodation in the meantime.
3. The provisional status is publicized so that other agencies and other public and private sector ICT customers (and ICT competitors) know what's up.