Lesson 6 of 10 · 6 min read
SBOMs and AI Bills of Materials
A software bill of materials (SBOM) is a machine-readable inventory of the components in a piece of software, with versions and identifiers, so you can answer 'are we affected?' when a vulnerability is announced. An AI bill of materials extends that to models, datasets, adapters, prompts and tools, and to the lineage between them: which base model, which training data, which fine-tuning run. Both are inventories, not protections; their value comes from being accurate, current and queried.
free sign-in, no card required
Practise it as an interviewer asks it
How does code signing work, what does it guarantee, and what happens when a signing key is stolen?Compare the NIST AI RMF, ISO/IEC 42001 and the EU AI Act. Does one satisfy another?Why are pickle-based model files dangerous, and what does safetensors fix and not fix?What are the EU AI Act risk tiers, and what must a high-risk provider do?What does the shared responsibility model mean for a managed AI service?Secure the model supply chain from download to deployment.