What changed
FACT: CMS published an Interim Final Rule with comment period (2026-06-03, Federal Register 2026-11094) implementing the Medicaid community engagement (work) requirement under section 1902(xx) of the Social Security Act, with states REQUIRED to implement no later than January 1, 2027. FACT: CMS followed with final guidance to states (Healthcare Dive, VitalLaw coverage, June 2026) and a correction notice (C1-2026-11094). This creates a new recurring verification/exemption paperwork obligation for expansion-population adults across expansion states.
Why now
The implementation deadline is statutory and near: states must be live by 2027-01-01 (FACT from the IFC text). Press coverage explicitly calls the state timeline 'tight' (TiffinOhio.net headline, FACT that this is the coverage's claim). Every affected clinic, MCO, and community org must have a member-compliance process working in roughly 6 months. Buyers cannot defer; the deadline sets the sales calendar. HYPOTHESIS: the 60-day IFC comment window and pending litigation create noise, but orgs must prepare regardless because non-compliance means member disenrollment and lost revenue.
Converging signals
Three signals meet at one point: (1) a federal rule compelling a defined filer class (expansion adults demonstrating compliance or exemption — FACT from FedReg 2026-11094); (2) a fragmented submission surface — each state Medicaid agency stands up its own verification process/portal (FACT that states implement individually; fragmentation favoring a tooling layer is INFERENCE); (3) an economically motivated intermediary buyer — MCOs lose capitation revenue per disenrolled member and providers lose covered patients (INFERENCE, strongly supported by Behavioral Health Business and HME Business coverage showing provider-side alarm).
Customer pain
Expansion adults (~10-20M, INFERENCE from cluster) must periodically prove work/community-engagement hours or document exemptions. Most will not navigate this alone; the Arkansas 2018 precedent showed mass coverage loss driven by reporting friction, not actual noncompliance (HYPOTHESIS/known history, not in provided sources). Provider organizations publicly call the rule 'unnecessary and very burdensome' (FACT: HME Business headline quoting responding organizations). FQHCs, behavioral health providers, and MCOs absorb the burden: a disenrolled patient is uncompensated care for the clinic and lost per-member-per-month revenue for the MCO.
Who pays
Primary: Medicaid MCOs (direct PMPM revenue loss per disenrolled member — INFERENCE but structurally sound) and FQHCs/safety-net/behavioral-health provider groups (patient retention + uncompensated-care avoidance). Secondary: community-based orgs and navigator programs funded to do outreach. The beneficiary never pays. NOT the state agency (that is the enterprise-procurement channel to avoid as the only route).
Solved today
Nothing purpose-built exists yet — the rule is weeks old (FACT: IFC June 2026). Today this work is manual navigator/caseworker labor, generic care-management platforms (which do redetermination outreach, not hours-verification packet assembly), and whatever member portal each state ships. Georgia Pathways, the only live precedent program, relied on a state-built portal widely reported as failure-prone (HYPOTHESIS from general knowledge, not provided sources).
Why current solutions are bad
State portals will be beneficiary-facing, single-state, and built under deadline pressure by large SIs — no caseload view for a clinic managing 3,000 affected patients, no document capture workflow, no exemption-evidence assembly, no proactive deadline tracking across a panel. Care-management incumbents (Unite Us, findhelp) do referrals, not compliance-filing mechanics. The gap is the panel-level compliance cockpit for the intermediary org.
Proposed product
B2B web app for clinics/MCO care teams: import affected-member panel; per-member work/volunteer/school hours log (member-facing mobile capture via SMS link); document/photo capture; automated exemption screening against the rule's exemption categories (medically frail, caregivers, etc.) and exemption-packet assembly; deadline calendar per state's reporting cadence; export/submission formatted to each state's process as portals come online. Charge PMPM on the affected-member count.
MVP version
Single-state (pick the first mover with a published process — watch state guidance releases in July-Sept 2026): panel tracker + hours log + exemption-packet PDF assembly + deadline reminders. No portal integration in v1 — states' portals don't exist yet, so 'portal-formatted export' is the honest v1 claim. 4-8 weeks of AI-assisted build; HIPAA posture from day one (hosted BAA stack, e.g. AWS/Aptible) since member data is PHI.
30-day build
Read the IFC and CMS state guidance end-to-end; build the exemption-category rules engine from the rule text (public, citable). Interview 10 FQHC ops directors / behavioral-health administrators (reachable via NACHC-affiliated state primary care associations) and 3 MCO Medicaid market leaders. Track each expansion state's implementation guidance as it drops. Ship the panel-tracker skeleton.
60-day build
Pilot with 2-3 clinics in the chosen first state at low/no cost in exchange for design input and a case study. Build member-facing SMS hours-capture. Publish a free 'state-by-state Medicaid work-requirement implementation tracker' as the demand-gen asset — this is exactly the founder's public-records/monitoring strength and will pull inbound from every compliance-anxious org.
90-day revenue plan
Convert pilots to paid ($1-3 PMPM on affected members, or $500-1,500/mo per clinic site flat), open second state. First revenue realistically day 90-150 — inside the founder's 180-day window and BEFORE the Jan 1 2027 deadline, when urgency peaks. Q4 2026 is the forced buying season.
Distribution path
State primary care associations and NACHC channels; behavioral-health provider associations (Behavioral Health Business coverage shows that vertical is paying attention — FACT); the free implementation tracker for inbound; direct outreach to Medicaid MCO quality/retention teams citing member-months saved. Demonstrated-value selling: show a clinic its projected disenrollment exposure from public enrollment data.
Pricing hypothesis
$1-3 per affected member per month to MCOs; $99-499/mo per clinic site for providers; optional per-exemption-packet fee ($5-15) mirroring the founder's proven ELDT per-filing model. At 20k covered members across a handful of MCO/clinic contracts, this is a $40-60k/mo business (HYPOTHESIS).
Technical difficulty
Moderate. Rules engine from published rule text, CRUD + document capture + SMS, PDF assembly — all squarely solo-buildable with AI assistance. The hard parts are HIPAA-compliant infrastructure (solved with money, which the founder now has) and tracking 40 states' divergent processes (a monitoring problem — the founder's existing strength). No ML required.
Legal / regulatory risk
Real and above-average: (1) states are already in federal court challenging parts of the rule (FACT: Georgetown coverage of states' suit re medically frail); prior work-requirement programs were vacated in court (HYPOTHESIS/history). If the rule is enjoined, the market pauses — though the reconciliation-law statutory basis makes full vacatur less likely than the 1115-waiver era (INFERENCE). (2) PHI handling requires HIPAA compliance and BAAs — an execution cost, not a license barrier. (3) Anti-kickback RFI activity in the space (FACT: FedReg 2026-12676) is adjacent noise, not a direct threat to a compliance tool.
Platform dependency
None that can deplatform. Government submission surfaces have no platform owner. Dependency risk is regulatory (rule survival) not platform.
Founder fit
Very high on the pattern: this is exactly the ELDT shape — a federal mandate creates a compelled filer class, the founder builds the paperwork/submission layer and charges per member/filing. His public-records monitoring and low-budget execution strengths map directly onto the state-by-state tracker wedge. The one mismatch: healthcare/Medicaid is a new domain with PHI obligations and no existing network — steeper than trucking was (INFERENCE). Not medical-device regulated; it's paperwork software, so his 'avoid heavily regulated medical' rule does not squarely apply.
Breakout potential
High. ~40 expansion states × recurring monthly filings × 10-20M affected members is a large recurring surface; the same panel-compliance engine extends to redeterminations, SNAP work requirements (same reconciliation law), and eligibility churn generally. This could also be an acquisition target for care-management incumbents (HYPOTHESIS).
Final recommendation
PURSUE, with a litigation hedge and a channel constraint. This is the founder's proven ELDT pattern at 100× the filer population, with a hard statutory deadline ~6 months out doing the selling. Sequence to de-risk: ship the free state-implementation tracker within 30 days (near-zero cost, builds authority and a lead list regardless of litigation outcome), run 10 clinic/MCO discovery interviews, and only build the full product on evidence of budget. Sell to clinics/behavioral-health first (reachable, fast), treat MCOs as the expansion channel. Keep burn low enough that an injunction is survivable — the tracker asset retains value covering the litigation itself.
Next action
Read FedReg 2026-11094 in full and extract the exemption categories, reporting cadence, and state verification obligations into a rules matrix; simultaneously email 10 FQHC/behavioral-health ops leads (via state primary care associations) asking one question: 'What is your plan for tracking member community-engagement compliance before January 1?'