{
  "evidenceCutoff": "2026-09-01",
  "sources": [
    {
      "id": "S01",
      "publisher": "Cisco AI Defense",
      "title": "Cisco AI BOM repository and documentation",
      "url": "https://github.com/cisco-ai-defense/aibom",
      "type": "official repository",
      "lastVerified": "2026-09-01",
      "version": "1.10.0",
      "publishedOrUpdated": "2026-08-17",
      "scope": "Inputs, AI asset coverage, output commands, policy and agentic-mode prerequisites."
    },
    {
      "id": "S02",
      "publisher": "Trusera",
      "title": "ai-bom repository and documentation",
      "url": "https://github.com/Trusera/ai-bom",
      "type": "official repository",
      "lastVerified": "2026-09-01",
      "version": "v3.1.0",
      "publishedOrUpdated": "2026-05-24",
      "scope": "Scanner surfaces, formats, CI examples, risk gates and Cedar policy support."
    },
    {
      "id": "S03",
      "publisher": "IDLab, Ghent University and imec",
      "title": "AIBoMGen CLI repository and documentation",
      "url": "https://github.com/idlab-discover/aibomgen-cli",
      "type": "official repository",
      "lastVerified": "2026-09-01",
      "version": "v0.2.1",
      "publishedOrUpdated": "2026-08-26",
      "scope": "Hugging Face discovery, CycloneDX generation, completeness, enrichment, vulnerability import and SBOM merge."
    },
    {
      "id": "S04",
      "publisher": "OWASP GenAI Security Project",
      "title": "OWASP AIBOM Generator",
      "url": "https://genai.owasp.org/resource/owasp-aibom-generator/",
      "type": "official project page",
      "lastVerified": "2026-09-01",
      "version": "Hugging Face Space commit 6165ba9",
      "publishedOrUpdated": "2026-03-12",
      "scope": "Hugging Face model input, CycloneDX-aligned JSON, visualization and completeness scoring."
    },
    {
      "id": "S05",
      "publisher": "OWASP GenAI Security Project",
      "title": "OWASP AIBOM Generator live Space",
      "url": "https://huggingface.co/spaces/GenAISecurityProject/OWASP-AIBOM-Generator",
      "type": "official hosted tool",
      "lastVerified": "2026-09-01",
      "version": "commit 6165ba9ef889951dc0fc5065a3cc65c45bc01f63",
      "publishedOrUpdated": "2026-03-12",
      "scope": "Public availability, hosting mode and project identity."
    },
    {
      "id": "S06",
      "publisher": "Mend.io",
      "title": "The AI Bill of Materials Report",
      "url": "https://docs.mend.io/platform/latest/the-ai-bill-of-materials-report",
      "type": "official product documentation",
      "lastVerified": "2026-09-01",
      "version": "documentation current at cutoff",
      "publishedOrUpdated": "2026-08-24",
      "scope": "Report categories, export versions, API scopes, entitlements and explicit limitations."
    },
    {
      "id": "S07",
      "publisher": "Mend.io",
      "title": "Mend AI release notes",
      "url": "https://docs.mend.io/platform/latest/mend-ai-release-notes",
      "type": "official release notes",
      "lastVerified": "2026-09-01",
      "version": "2026-08-24 release",
      "publishedOrUpdated": "2026-08-24",
      "scope": "Feature release date, detected AI entities, metadata-only export and triage audit trail."
    },
    {
      "id": "S08",
      "publisher": "CycloneDX",
      "title": "Machine Learning Bill of Materials capability",
      "url": "https://cyclonedx.org/capabilities/mlbom/",
      "type": "official standard documentation",
      "lastVerified": "2026-09-01",
      "version": "CycloneDX 1.7",
      "publishedOrUpdated": "2025-10",
      "scope": "Model cards, datasets, dependencies, provenance, formulation, claims and attestations."
    },
    {
      "id": "S09",
      "publisher": "SPDX",
      "title": "SPDX 3.0.1 AI Profile",
      "url": "https://spdx.github.io/spdx-spec/v3.0.1/model/AI/AI/",
      "type": "official standard specification",
      "lastVerified": "2026-09-01",
      "version": "3.0.1",
      "publishedOrUpdated": "2024-12",
      "scope": "AI package identity, license relationships and AI profile conformance."
    },
    {
      "id": "S10",
      "publisher": "Linux Foundation Research and SPDX",
      "title": "Implementing AI Bill of Materials with SPDX 3.0",
      "url": "https://www.linuxfoundation.org/hubfs/LF%20Research/lfr_spdx_aibom_102524a.pdf?hsLang=en",
      "type": "official research report",
      "lastVerified": "2026-09-01",
      "version": "October 2024",
      "publishedOrUpdated": "2024-10",
      "scope": "AI and dataset field mapping, model cards, FactSheets, provenance and known profile gaps."
    },
    {
      "id": "S11",
      "publisher": "Pharos Production",
      "title": "AI Supply Chain Security: From SBOM to AIBOM, Slopsquatting and Model Poisoning",
      "url": "https://pharosproduction.com/insights/engineering/ai-supply-chain-security-2026/",
      "type": "publisher engineering article",
      "lastVerified": "2026-09-01",
      "version": "updated 2026-07-20; reviewed 2026-08-15",
      "publishedOrUpdated": "2026-08-15",
      "scope": "Operational motivation, model poisoning controls and the publisher's scoped security-audit method."
    }
  ]
}