K07 · evidence-bundled critical-infrastructure assurance

Model and AI-system Bill of Materials

Direct answer

Model and AI-system Bill of Materials provides bounded component or provenance evidence and must be combined with authenticity, installed-state, vulnerability, custody, and recovery evidence.

Stable record: SCA-K07-004
Claim status: PROJECT TECHNICAL PROPOSAL
Last reviewed: 2026-08-16
Research cutoff: 2026-08-16
Source type: GOVERNED PROJECT KNOWLEDGE
Currentness: Current for release 2.1.0; external sources require periodic revalidation.
Correction state: No unresolved public correction recorded for this release.
Machine record: Static JSON record

Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.

Artifact class

Supply-chain record
Stable ID	`SCA-K07-004`
Artifact type	AI-BOM/MODEL-BOM

Required fields

model identifier and hash
base model and adapters
training and evaluation lineage
software and tool dependencies
system prompt or policy version under controlled access
runtime configuration
known limitations
license and use restrictions

Validation expectations

artifact identity
evaluation replay
dependency and tool-policy match
promotion receipt
rollback target

Limitations

lineage does not prove safe behavior
benchmark performance does not prove field judgment
proprietary data may require protected evidence access

Source relationships

NIST SP 800-218A — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models — National Institute of Standards and Technology; Final; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.
NIST AI RMF Profile on Trustworthy AI in Critical Infrastructure — Concept Note — National Institute of Standards and Technology; Concept note; CONCEPT NOTE; PROFILE UNDER DEVELOPMENT. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.

Assurance boundary

Inventory, signature, attestation, supplier status, vulnerability status, and installed configuration remain separate evidence properties. This record does not certify a product or prove that a deployed asset matches its declared bill of materials.