AI Supply Chain & MLBOM
An MLBOM (Machine Learning Bill of Materials) is a comprehensive inventory of all components in an AI system: models, frameworks, libraries, data sources, tools, and configurations. Like an SBOM for software, it enables supply chain security, compliance auditing, and vulnerability tracking for AI applications.
Frequently Asked Questions
What is an MLBOM?
An MLBOM (Machine Learning Bill of Materials) lists every component in your AI system: LLM models used, framework versions, tool configurations, data sources, and security controls. It answers "what is in this AI system?" for auditors, compliance teams, and security reviewers.
Why do I need an AI bill of materials?
Regulatory requirements (EU AI Act), enterprise procurement processes, and security audits increasingly require documentation of AI components. An MLBOM provides this automatically, saving weeks of manual documentation.
How does Inkog generate an MLBOM?
Inkog scans your agent codebase and automatically generates an MLBOM that includes: models referenced in code, framework versions, tool configurations, security controls present, and compliance mapping. Output formats include JSON and SARIF.
How Inkog Detects This
Inkog generates MLBOMs automatically by scanning your agent codebase. The MCP server's inkog_generate_mlbom tool produces a comprehensive inventory of models, frameworks, tools, and security controls with compliance framework mapping.
npx -y @inkog-io/cli scan .