PAI-SF / 9 / PAI-SF-SUP-001
Component Provenance and Bill of Materials
Objective
Establish provenance of safety-relevant hardware, software, and model components.
Control / requirement
Maintained HBOM/SBOM/AI-BOM with vendor attestations.
Applicability
All physical AI systems with safety-relevant components sourced from third parties.
Expected evidence
BOM records; vendor attestation documents. [T2]
Assurance expectation
Evidence the BOM is maintained current with actual deployed components, not only at initial integration.
Dependencies
PAI-SF-ATT-002 (hardware anti-tamper) — provenance and tamper-detection are complementary.
Exclusions
Not applicable to fully in-house-manufactured components with no third-party sourcing.
Maturity / conformance relevance
Expected at all conformance levels.
Ecosystem relationship
Extends GAISSF™ supply chain controls to physical AI components; provides supply-chain incident categories for UAIF™.