SBOMs into Agentic AIBOMs: Schema Extensions, Agentic Orchestration, and Reproducibility Evaluation

arXiv cs.AI / 3/12/2026

💬 OpinionIdeas & Deep AnalysisModels & Research

共有:

Key Points

The paper introduces agentic Artificial Intelligence Bills of Materials (AIBOMs), extending traditional SBOMs to capture runtime context, environment drift, and exploitability context through autonomous, policy-constrained reasoning.
It proposes a multi-agent framework consisting of a baseline environment reconstruction agent (MCP), a runtime dependency and drift-monitoring agent (A2A), and a policy-aware vulnerability and VEX reasoning agent (AGNTCY).
The approach adds minimal, standards-aligned schema extensions to CycloneDX and SPDX to record execution context, dependency evolution, and agent decision provenance while maintaining interoperability.
Evaluation shows improved runtime dependency capture, reproducibility fidelity, and stability of vulnerability interpretation with low computational overhead, and ablation studies indicate each agent provides capabilities unavailable through deterministic automation.

Abstract

Software supply-chain security requires provenance mechanisms that support reproducibility and vulnerability assessment under dynamic execution conditions. Conventional Software Bills of Materials (SBOMs) provide static dependency inventories but cannot capture runtime behaviour, environment drift, or exploitability context. This paper introduces agentic Artificial Intelligence Bills of Materials (AIBOMs), extending SBOMs into active provenance artefacts through autonomous, policy-constrained reasoning. We present an agentic AIBOM framework based on a multi-agent architecture comprising (i) a baseline environment reconstruction agent (MCP), (ii) a runtime dependency and drift-monitoring agent (A2A), and (iii) a policy-aware vulnerability and VEX reasoning agent (AGNTCY). These agents generate contextual exploitability assertions by combining runtime execution evidence, dependency usage, and environmental mitigations with ISO/IEC 20153:2025 Common Security Advisory Framework (CSAF) v2.0 semantics. Exploitability is expressed via structured VEX assertions rather than enforcement actions. The framework introduces minimal, standards-aligned schema extensions to CycloneDX and SPDX, capturing execution context, dependency evolution, and agent decision provenance while preserving interoperability. Evaluation across heterogeneous analytical workloads demonstrates improved runtime dependency capture, reproducibility fidelity, and stability of vulnerability interpretation compared with established provenance systems, with low computational overhead. Ablation studies confirm that each agent contributes distinct capabilities unavailable through deterministic automation.