Skip to content

airblackbox/aibom-policy-engine

AIBOM Policy Engine

CI License Python 3.10+

AI Bill of Materials (AIBOM) generation and validation engine. Creates structured inventories of all AI components in a system (models, tools, data sources, policies).

Features

  • Build AIBOM from components or gateway data
  • Validate AIBOM structure and content
  • EU AI Act risk classifications
  • Dependency tracking
  • RESTful API with FastAPI
  • CLI for AIBOM management

Quick Start

pip install -e .
python -m app.server

API runs on http://localhost:8600/v1

AIBOM Components

  • Models: ML/LLM models (GPT-4, Claude, etc.)
  • Tools: Callable functions/APIs
  • Data Sources: Databases, APIs, document stores
  • Policies: Rules and constraints
  • Processors: Data transformers
  • Frameworks: Libraries (PyTorch, TensorFlow)

API Endpoints

Method Endpoint Purpose
GET /v1/health Health check
POST /v1/aibom/create Create AIBOM
GET /v1/aibom/{id} Get AIBOM
POST /v1/aibom/{id}/validate Validate AIBOM
POST /v1/components Add component
GET /v1/aiboms List all AIBOMs

Risk Classifications

  • MINIMAL: Low risk components
  • LIMITED: Moderate risk
  • HIGH: Significant risk
  • UNACCEPTABLE: Should not be used

Testing

pytest tests/ -v

EU AI Act Reference

AIBOM aligns with EU AI Act transparency requirements for system components and data sources.

License

MIT

About

AIBOM policy-as-code engine — deny risky combinations of models, tools, and data. OPA-style policy rules for AI supply chain governance. Enforce model pinning, tool approvals, and provider restrictions.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Contributors

Languages