How to meet it
OWASP AISVS v1.01
Supply Chain Security for Models · AI BOM & Supply Chain Monitoring
Sign the AI bill of materials
Verify that AI BOMs are cryptographically signed before deployment.
OWASP AISVS v1.01, requirement 6.2.2
In plain English
Sign each AI bill of materials before deployment, so nobody can change it without detection.
What good looks like
- Bills of materials are signed by the build pipeline.
- Signatures are checked before deployment.
How teams usually do it
- Signing the bill of materials with the same tooling used for model artifacts.
Evidence an auditor would accept
- Signed bills of materials and verification logs.
Common mistakes
- Signing the model but leaving the bill of materials unsigned beside it.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.