Stupid question (but I'm not American, I'm Canadian), but how exactly are DEI hires identified after the fact?

This is an actual question that's plagued me for a while now. I mean, Trump or whomever can't just put every Black, POC, disabled, etc person hired in the Federal government on leave or fire them.

I'm sure many of these people are qualified in any event, doing a damn good job, so seriously, practically speaking, how is this going to work?