Congress gives the Pentagon permission and money in two separate laws: the authorization act sets policy and ceilings, while appropriations acts provide the funds. The FY2026 NDAA was signed December 18, 2025 as Public Law 119-60, per GovInfo — even as the department emerged from a 43-day shutdown that began October 1.
What Does Each Kind of Bill Actually Do?
An authorization is a permission slip with a ceiling. It creates or continues programs, sets end strengths and policy, and recommends funding levels. An appropriation is the cash transfer — the legal authority to obligate and spend. Neither substitutes for the other, and the distinction is structural, dating to the congressional budget process itself.
| Feature | Authorization (NDAA) | Appropriation |
|---|---|---|
| Function | Policy, program creation, ceilings | Spending authority, obligation of funds |
| Committees | Armed Services (HASC/SASC) | Appropriations (defense subcommittees) |
| Regularity | Annual, enacted 60+ consecutive years | Annual, frequently late or replaced by CRs |
| 2025-26 example | PL 119-60, signed December 18, 2025 | Lapsed October 1; CRs carried the department |
How Did the Two Tracks Diverge in 2025?
The authorization track performed on schedule. The House passed its version September 10, 2025 by 231-196; the Senate its own October 9 by 77-20; and the final S. 1071 cleared the House December 10 by 312-112 and the Senate December 17 by 77-20, per the recorded legislative history. The Holland & Knight analysis notes it was the 65th consecutive annual authorization — one of the last enduring bipartisan rituals in Washington.
The appropriations track failed its deadline. Funding lapsed October 1, the shutdown ran 43 days, and roughly 900,000 federal employees were furloughed before a funding measure reopened the government in November. The department thus entered 2026 fully authorized but still spending under extensions rather than enacted full-year bills in every account.
Why Does Congress Keep the Two-Step Design?
Because it doubles the leverage points. The authorization committees own the policy debate — acquisition reform dominated the FY2026 bill, implementing SPEED Act and FoRGED Act provisions and codifying Executive Order 14265, per Holland & Knight. The appropriators own the fiscal constraint, and their subcommittee allocations reflect the total budget deal, not just defense priorities.
For the department, the design creates a chronic timing risk. Programs can be authorized for years while appropriations lag, forcing continuing resolutions that freeze spending at prior-year rates and bar new starts. Exactly that dynamic shaped the fall of 2025.
What Should Readers Watch in the Year Ahead?
Three signals separate a functioning cycle from a broken one. First, whether the FY2027 authorization moves on the traditional calendar or slips toward December again. Second, whether appropriations bills clear before September 30, 2026, or the country repeats the stopgap drill that H.R. 6500's continuing-resolution machinery now represents. Third, whether the anomalies — items like the omitted SBIR and STTR reauthorizations flagged by Holland & Knight — get restored in later legislation.
What Happens When the Appropriation Arrives Late?
Continuing resolutions fill the gap, and they change behavior in three predictable ways. First, spending continues at the prior year's rate, which means new programs cannot start and growing programs are underfunded relative to plan. Second, the standard CR bars — no new starts, no multiyear procurement initiations without specific appropriation — appear again in the current generation of stopgaps, including the Senate-passed August 2026 text whose Section 101 machinery extends fiscal 2026 rates into the new year. Third, managers hoard: contracting officers slow obligations near each CR expiry date because they cannot be certain funds will remain available.
The 2025 lapse demonstrated the harder version of the same problem. When there is no CR at all, obligations that require new funding stop, and per the Department of Defense's September 2025 shutdown guidance, only activities fitting Anti-Deficiency Act exceptions — multiyear funding, the Feed and Forage Act, necessary implication, and constitutional duties — continue. Authorization ceilings were irrelevant that fall; the binding document was the absence of an appropriation.
How Do Readers Tell Which Bill a Number Came From?
The test is the verb. If a program is "authorized" for an amount, that figure is a ceiling in the NDAA, reported by the Armed Services committees. If an account is "appropriated" an amount, that is real spending authority from an appropriations act or a CR. Budget justifications accompanying the President's request are proposals that precede both. Mixing the three in one sentence is the most common error in defense budget coverage, and the December 2025 sequence — authorization signed December 18, while spending still ran on extensions — is the cleanest recent illustration of why the distinction matters.
What Does the 2026 Year Hold for Both Tracks?
The authorization calendar starts again with the spring markup season in the House and Senate Armed Services Committees, and the appropriations calendar runs against the September 30 end of the fiscal year. Two things would break the pattern: a budget deal that settles the topline early, or another failure of the appropriations deadline of the kind that produced the 43-day lapse. The authorization track, on its 65th consecutive year of enactment, is the more reliable machine; the money track remains the one that actually decides what the Pentagon can buy.
Does One Bill Matter More?
Neither works alone. An unauthorized program can still be funded by appropriators in practice, and an authorized program cannot spend without an appropriation. The honest summary is that the NDAA sets what the department is allowed to be, and the appropriations set what it can actually buy — and in the 2026 fiscal year, the gap between those two documents ran 43 days.
