Grain Ecosystem

Biochar is entering one of the most consequential policy windows in recent years. Between the federal government reopening, pending tax credit guidance, Farm Bill negotiations, and a wave of state-level action, 2026 is shaping up to be a year of both uncertainty and opportunity for producers, developers, and landowners. 

To help the community prepare, we’re hosting a new webinar: “From Shutdown to Scale-Up: What Federal and State Policy Means for Biochar in 2026.” 

Webinar - From Shutdown to Scale-Up

Join us for a fast, focused briefing on the policy landscape shaping biochar’s path in 2026. 

We’ll break down how the agreement to reopen the Federal Government will affect key agencies, what’s at stake for 45Q and the Farm Bill, and where bipartisan momentum is emerging, from the Fix Our Forests Act to wildfire, soil carbon, and MRV legislation. 

At the state level, we’ll unpack movement in California, New York, and Maryland, including legislative and regulatory trends, procurement opportunities, and the early signals for 2026 policymaking. 

The session will close with practical guidance on how producers, forest owners, and project developers can engage with USBC efforts, contribute intel, and help shape policy outcomes, followed by an open Q&A and a strategic outlook for the year ahead. 

A must-attend conversation for anyone navigating biochar deployment, policy, or market development in 2026. 

Join us on Tuesday, December 10 at 10 AM EST for a focused webinar on the federal and state policies shaping biochar’s path in 2026. 

origination

internal

carbon_partner_plus

member

free

Biochar is entering one of the most consequential policy windows in recent years. Between the federal government reopening, pending tax credit guidance, Farm Bill negotiations, and a wave of state-level action, 2026 is shaping up to be a year of both uncertainty and opportunity for producers, developers, and landowners. To help the community prepare, we’re hosting a new webinar: “From Shutdown to Scale-Up: What Federal and State Policy Means for Biochar in 2026.” <a href="https://luma.com/3wqrrnh2" target="_blank" rel="noopener noreferrer">Click here to register.</a>Featuring: <ul class="bullet"><li value=1>Maureen Walsh, Executive Director, U.S. Biochar Coalition (USBC) </li></ul><ul class="bullet"><li value=1>Jason Dodier, Co-Founder & CCO, Grain Ecosystem </li></ul><img src="/media/WebinarDecember.jpg" alt="WebinarDecember.jpg" width="1080" height="1350"/>Join us for a fast, focused briefing on the policy landscape shaping biochar’s path in 2026. We’ll break down how the agreement to reopen the Federal Government will affect key agencies, what’s at stake for 45Q and the Farm Bill, and where bipartisan momentum is emerging, from the Fix Our Forests Act to wildfire, soil carbon, and MRV legislation. At the state level, we’ll unpack movement in California, New York, and Maryland, including legislative and regulatory trends, procurement opportunities, and the early signals for 2026 policymaking. The session will close with practical guidance on how producers, forest owners, and project developers can engage with USBC efforts, contribute intel, and help shape policy outcomes, followed by an open Q&A and a strategic outlook for the year ahead. A must-attend conversation for anyone navigating biochar deployment, policy, or market development in 2026. <h2>Watch all Grain Webinars </h2><ul class="bullet"><li value=1><a href="https://grainecosystem.com/knowledge-hub/articles/691204e28d0fcf646bb45360" target="_blank" rel="noopener noreferrer">Carbon Removal Meets Compliance: Navigating the Legal Landscape for Biochar Projects</a> with Peter Mayer.</li><li value=2><a href="https://grainecosystem.com/knowledge-hub/articles/68e6a74f3933aa4c973a0716" target="_blank" rel="noopener noreferrer">Biochar in Bloom: Lessons from Okaw Valley Orchard</a> with Mike Mitchell. </li><li value=3><a href="https://grainecosystem.com/knowledge-hub/articles/6883a7802492b585355e77ee" target="_blank" rel="noopener noreferrer">The Green Bridge: Non-Traditional Finance for Biochar</a> with Adam Fraser. </li><li value=4><a href="https://grainecosystem.com/knowledge-hub/articles/67b75ae223e6759660f119ad" target="_blank" rel="noopener noreferrer">Advancing CDR: From Start-Up to Scale-Up</a> with Robert Höglund. </li><li value=5><a href="https://grainecosystem.com/knowledge-hub/articles/6751f73e593a512d338ee036" target="_blank" rel="noopener noreferrer">Building Biochar Markets for Value & Scale: Webinar Recap</a> with Myles Grey and Bernardo Del Campo. </li><li value=6><a href="https://grainecosystem.com/knowledge-hub/articles/67092f5e79685344119a953f" target="_blank" rel="noopener noreferrer">Dirt to Dollars. Unearthing the Science of Sustainable Investment</a> with Ryan Letourneau, Alicia Klepfer and Jason Dodier. </li></ul>

From Shutdown to Scale-Up: What Federal and State Policy Means for Biochar in 2026 

ProjectSupplyChainStageDesc

ProjectTechnologyStageDesc

ProjectBiocharOfftakeStageeDesc

ProjectOffsetPurchaseStageDesc

ProjectCarbonPartnerStageDesc

Internal High Impact

Internal Scan and/or Medium Impact

External - Low impact

External - DNS Query Only

Server-Side Request Forgery (SSRF)

Unsafe Cross-Origin Resource Sharing

HTTP Request Smuggling

Path Traversal

Sensitive Data Exposure

Non-Sensitive Data Exposure

Directory Listing Enabled

Same-Site Scripting

SSL Attack (BREACH, POODLE etc.)

Using Default Credentials

Basic Subdomain Takeover

High Impact Subdomain Takeover

Zone Transfer

Missing Certification Authority Authorization (CAA) Record

Misconfigured DNS

No Spoofing Protection on Email Domain

Email Spoofing to Inbox due to Missing or Misconfigured DMARC on Email Domain

Email Spoofing to Spam Folder

Missing or Misconfigured SPF and/or DKIM

Email Spoofing on Non-Email Domain

Mail Server Misconfiguration

Excessively Privileged User / DBA

Database Management System (DBMS) Misconfiguration

Change Email Address

Change Password

Delete Account

Manage 2FA

Lack of Password Confirmation

Registration

Login

Email-Triggering

SMS-Triggering

No Rate Limiting on Form

No Antivirus

No Size Limit

File Extension Filter Bypass

Unsafe File Upload

Cookie Scoped to Parent Domain

Session Token

Non-Session Cookie

Missing Secure or HTTPOnly Cookie Flag

Sensitive Click-Based Action

Form Input

Non-Sensitive Action

Clickjacking

Account Takeover

Account Squatting

Missing/Broken State Parameter

Insecure Redirect URI

OAuth Misconfiguration

Implementation Vulnerability

Brute Force

Missing

CAPTCHA

To Internet

Exposed Admin Portal

Missing DNSSEC

Fingerprinting/Banner Disclosure

Username/Email Enumeration

OPTIONS

TRACE

Potentially Unsafe HTTP Method Enabled

Lack of Forward Secrecy

Insecure Cipher Suite

Certificate Error

Insecure SSL

Reflected File Download (RFD)

X-Frame-Options

Cache-Control for a Non-Sensitive Page

X-XSS-Protection

Strict-Transport-Security

X-Content-Type-Options

Content-Security-Policy

Public-Key-Pins

X-Content-Security-Policy

X-Webkit-CSP

Content-Security-Policy-Report-Only

Cache-Control for a Sensitive Page

Lack of Security Headers

Direct Server Access

Web Application Firewall (WAF) Bypass

Race Condition

Cache Poisoning

Bitsquatting

Server Security Misconfiguration

Local

File Inclusion

Social Media Sharing Buttons

Parameter Pollution

Remote Code Execution (RCE)

LDAP Injection

SQL Injection

XML External Entity Injection (XXE)

Response Splitting (CRLF)

HTTP Response Manipulation

iframe Injection

Impersonation via Broken Link Hijacking

External Authentication Injection

Flash Based External Authentication Injection

HTML Content Injection

Email HTML Injection

Email Hyperlink Injection Based on Email Provider

Text Injection

Homograph/IDN-Based

Right-to-Left Override (RTLO)

Content Spoofing

Basic

Custom

Server-Side Template Injection (SSTI)

Server-Side Injection

Authentication Bypass

Second Factor Authentication (2FA) Bypass

Privilege Escalation

Cleartext Transmission of Session Token

Not Operational or Intended Public Access

Other Plaintext Protocol with no Secure Alternative

Over HTTP

Weak Login Function

Remote Attack Vector

Local Attack Vector

Session Fixation

On Logout (Client and Server-Side)

On Permission Change

On Logout (Server-Side Only)

On Password Reset and/or Change

Concurrent Sessions On Logout

On Email Change

On 2FA Activation/Change

Long Timeout

Failure to Invalidate Session

Concurrent Logins

Weak Registration Implementation

Broken Authentication and Session Management

For Publicly Accessible Asset

PII Leakage/Exposure

For Internal Asset

Pay-Per-Use Abuse

Intentionally Public, Sample or Invalid

Data/Traffic Spam

Non-Corporate User

Disclosure of Secrets

Automatic User Enumeration

Manual User Enumeration

EXIF Geolocation Data Not Stripped From Uploaded Images

Detailed Server Configuration

Full Path Disclosure

Descriptive Stack Trace

Visible Detailed Error/Debug Page

Disclosure of Known Public Information

Trusted 3rd Party

Untrusted 3rd Party

Token Leakage via Referer

User Facing

In the Background

On Password Reset

Sensitive Token in URL

Non-Sensitive Token in URL

Password Reset Token Sent Over HTTP

Token Leakage via Host Header Poisoning

Weak Password Reset Implementation

Mixed Content (HTTPS Sourcing HTTP)

OAuth Secret

File Paths

Sensitive Data Hardcoded

Internal IP Disclosure

Cross Site Script Inclusion (XSSI)

JSON Hijacking

Sensitive Token

Non-Sensitive Token

Via localStorage/sessionStorage

Non-Privileged User to Anyone

Privileged User to Privilege Elevation

Privileged User to No Privilege Elevation

CSRF/URL-Based

Self

Stored

Cross-Site Scripting (XSS)