> Surely such a deal would have to be approved by Congress, right?

That's the law. But Congress is abdicating much of it's power. The SCotUS defers to the WhiteHouse (ex:sides with the admin 90% of the time). The mechanisms that foster ethics in the 3 branches are being intentionally sabotaged by the majority in power.