The COMPEL Glossary Graph visualizes relationships between framework terminology, showing how concepts interconnect across domains, stages, and pillars. Term nodes cluster by pillar affiliation while cross-references reveal semantic dependencies — for example, how risk appetite connects to control effectiveness, model governance, and assurance requirements. This network representation helps practitioners navigate the framework vocabulary and understand that COMPEL terminology forms a coherent conceptual system rather than isolated definitions.
COMPEL Glossary / GL-71
AI Bill of Materials (AI-BOM)
A structured inventory of every component that comprises an AI system — including foundation models, fine-tuned variants, training datasets, embeddings, vector stores, prompts, agent tools, third-party APIs, libraries, and runtime dependencies — together with their provenance, licenses, versions, and known risks.
What this means in practice
The AI-BOM is to AI systems what the SBOM (Software Bill of Materials) is to traditional software, providing the supply-chain transparency needed for vendor due diligence, incident response, regulatory disclosure, and procurement governance.
Context in the COMPEL framework
Produced and maintained as part of D20 (AI Supply Chain Governance). Initial AI-BOMs are drafted in Calibrate when shadow AI and procured systems are inventoried, formalized in Model alongside procurement governance design, refreshed in Produce as systems change, audited in Evaluate against contractual and regulatory requirements, and updated in Learn as new dependencies emerge.
Where you see this
AI Bill of Materials (AI-BOM) is most commonly referenced when teams work across the Calibrate , Organize , Model , Produce , Evaluate and Learn stages — especially within the Operational Readiness layer . It appears in governance artifacts, assessment instruments, and delivery playbooks wherever COMPEL is operationalized.
Related COMPEL stages
Related domains
Canonical taxonomy
Synonyms
AI-BOM , AI components inventory , AI supply chain manifest
See also
- AI Supply Chain Governance (D20) — The 20th maturity domain in the COMPEL framework, covering the governance of AI systems procured from or dependent on external parties.
- Shadow AI Inventory — A structured catalogue of AI tools, models, and automated systems already in use across the organization that were deployed outside formal governance channels.
- Evidence Pack — The complete, auditable collection of artifacts, test results, decision records, and attestations that demonstrate an AI system meets its governance, compliance, and operational requirements.