It sounds like they are asking, in a very awkward way and I'm not sure they are completely understanding their own needs, for a version of curl that can tick al

It sounds like they are asking, in a very awkward way and I'm not sure they are completely understanding their own needs, for a version of curl that can tick all the boxes for appropriation purpose (security audited by a US corporation and final sign-off by a US citizen). Question is: How much is that worth to them? You could very well have a paid NASA curl and sell that version (it's not against the GPL) and still distribute source.