← Founder Notes
Archive

The software bill of materials just learned what ai ships. cisa and the g7 released the ai sbom…

Yethikrishna ROriginal on Threads

the software bill of materials just learned what ai ships. cisa and the g7 released the ai sbom minimum elements on september 21, standardizing how model supply chains describe weights, data and tools.

the ingredients list now covers training runs.

Context

CISA's page, with a publish date of May 12, 2026, says CISA and the G7 partners, Germany, Canada, France, Italy, Japan, the United Kingdom and the EU, released joint guidance titled Software Bill of Materials for AI - Minimum Elements. The guidance is described as not exhaustive or mandatory, as reflecting consensus of G7 experts, and as one that will expand over time.

How it compares

The first-party publish date is May 12, 2026, not September 21, and no September 21 event or later update was located. It is nonmandatory guidance, though standardizing descriptions does not require a mandate and the note is not treated as refuted on that basis. Which fields the document lists for weights, data and tools was not read, since the PDFs were seen as snippets only, so the note's coverage of training runs is unverified. The ingredients list now covers training runs is the author's take.

Watch next

  • Later versions of the guidance and any regulator adoption.

Sources

  1. CISA: Software Bill of Materials for AI, minimum elements (May 12, 2026)cisa.gov

Provenance

The note above is reproduced unedited from the original post, first published on Threads on 23 September 2026 at 00:46 IST. Sources are the papers and datasets the note draws on.

View the original post
Embed this note
<iframe src="https://founder.myndlabs.tech/notes/embed/the-software-bill-of-materials-just-learned-what-Ddmdz1XAodL" width="480" height="420" style="border:0;max-width:100%" loading="lazy" title="The software bill of materials just learned what ai ships. cisa and the g7 released the ai sbom…"></iframe>

More notes