Technical fine point: the facility can be cGMP compliant, but that does not mean the specific product is cGMP compliant. The reference to “cGMP compliant facilities” is another set of words designed to deceive the reader. cGMP compliance for pharmaceutical product means the process of making that specific product, it’s raw materials and all quality control steps are certified compliant. I believe that the DOD is sending “black box” components to be assembled by pharma in pharmaceutical manufacturing places but pharmas themselves (especially employees on the manufacturing line) probably do not have good idea or traceability of what those components are.