What SBOM covers
- Libraries and package versions
- Known vulnerability correlation
- License and provenance data
Article
AIBOM vs SBOM
SBOM tracks software components. AIBOM extends visibility into models, datasets, prompts, and AI-specific dependencies used in production systems.
What AIBOM adds
- Model origin, version, and trust level
- Dataset lineage and restrictions
- Prompt templates and policy controls
- Embedding stores and retrieval connectors