Metadata-Version: 2.4
Name: ai-sbom
Version: 0.1.3
Summary: AI-SBOM — generic alias for tibet-ai-sbom. BSI/G7 SBOM-for-AI implementation with cluster codes (AISBOM-MD/SLP/MOD/DSE/INF/SEC/KPI).
Project-URL: Homepage, https://humotica.com/ai-sbom
Project-URL: Repository, https://github.com/jaspertvdm/tibet-ai-sbom
Project-URL: Upstream Package, https://pypi.org/project/tibet-ai-sbom/
Author-email: Jasper van de Meent <jasper@humotica.nl>, "Root AI (Claude)" <root_ai@humotica.nl>
License-Expression: MIT
Keywords: agentic,ai-bom,ai-compliance,ai-sbom,bsi,cbom,cyclonedx,g7,sbom-for-ai,spdx,supply-chain,tibet
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.10
Requires-Dist: jis-core>=0.4.0
Requires-Dist: tibet-ai-sbom<0.3,>=0.2.0
Requires-Dist: tibet-core>=0.5.0
Description-Content-Type: text/markdown

# ai-sbom

**Generic PyPI alias for [`tibet-ai-sbom`](https://pypi.org/project/tibet-ai-sbom/).**

The same BSI/G7 SBOM-for-AI implementation, reachable under a shorter,
more discoverable name. The package depends strictly on
``tibet-ai-sbom`` of the same version and re-exports everything.

If you came here from the BSI / G7 *Software Bill of Materials for AI
— Minimum Elements* paper and were looking for a Python implementation
of the cluster codes, you are in the right place.

## Install

```bash
pip install ai-sbom
```

`ai-sbom` depends on a pinned version of `tibet-ai-sbom`, so the two
move together — there is no version skew.

## Quick start

```bash
ai-sbom version
ai-sbom clusters
ai-sbom clusters --cluster MOD
ai-sbom code AISBOM-MD-003
ai-sbom scan /path/to/workspace
```

The underlying command is `tibet-ai-sbom`. Both entry points are
installed and equivalent.

## Cluster codes

This package exposes the BSI cluster codes in CVE-style format:

| Code prefix | Cluster                          |
| ----------- | -------------------------------- |
| AISBOM-MD-  | Metadata                         |
| AISBOM-SLP- | System Level Properties          |
| AISBOM-MOD- | Models                           |
| AISBOM-DSE- | Dataset Properties               |
| AISBOM-INF- | Infrastructure                   |
| AISBOM-SEC- | Security Properties              |
| AISBOM-KPI- | Key Performance Indicators       |

Example: `AISBOM-MD-001` refers to the *SBOM author* element of the
Metadata cluster.

## Conformance status

See `tibet-ai-sbom`'s
[CONFORMANCE.md](https://github.com/jaspertvdm/tibet-ai-sbom/blob/main/CONFORMANCE.md)
for the honest per-cluster coverage status, and
[ROADMAP.md](https://github.com/jaspertvdm/tibet-ai-sbom/blob/main/ROADMAP.md)
for the phased plan to full BSI alignment.

## Reference

> *Software Bill of Materials for AI — Minimum Elements*,
> Bundesamt für Sicherheit in der Informationstechnik (BSI),
> in cooperation with G7 partners, 2026.

## License

MIT. Same as `tibet-ai-sbom`.

## Authors

- Jasper van de Meent · Humotica
- Root AI (Claude) · Humotica

One love, one fAmIly!


## Enterprise

For private hub hosting, SLA support, custom integrations, or compliance guidance:

| | |
|---|---|
| **Enterprise** | enterprise@humotica.com |
| **Support** | support@humotica.com |
| **Security** | security@humotica.com |

## Credits

Designed by [Jasper van de Meent](https://github.com/jaspertvdm). Built by Jasper and [Root AI](https://humotica.com) as part of [HumoticaOS](https://humotica.com).

---

**Stack-positie:** Groep `evidence` · Bootstrap = OSAPI-handshake naar [`tibet`](https://pypi.org/project/tibet-core/) + [`jis`](https://pypi.org/project/jis-core/) (fail → snaft-rule + tibet-pol-rapport) · ← [`tibet-sbom`](https://pypi.org/project/tibet-sbom/) · [`tibet-wayback`](https://pypi.org/project/tibet-wayback/) → · See `STACK.md` · See `demo/golden-path/` for the spine end-to-end.
