Bidda Sovereign Intelligence · 10,108 Verified Nodes · 39 Sovereign Pillars

MITRE ATLAS Mitigation AI Bill of Materials (AML.M0023) - AI Supply Chain Inventory and Dataset Provenance Tracking

This node operationalises MITRE ATLAS mitigation AML.M0023 (AI Bill of Materials). An AI Bill of Materials (AI BOM) contains a full listing of artifacts…

What MITRE ATLAS Mitigation AI Bill of Materials (AML.M0023) - AI Supply Chain Inventory and Dataset Provenance Tracking requires

This node operationalises MITRE ATLAS mitigation AML.M0023 (AI Bill of Materials). An AI Bill of Materials (AI BOM) contains a full listing of artifacts and resources that were used in building the AI. The AI BOM can help mitigate supply chain risks and enable rapid response to reported vulnerabilities. This can include maintaining dataset provenance, i.e. a detailed history of datasets used for AI applications. The history can include information about the dataset source as well as well as a complete record of any modifications. It maps the mitigation to EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations and drives a 10-gate verification workflow that an AI agent can execute against any production system.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: 5e60f2422c54f4343f6a431a16606fc57a0fa317cb398deb433ee31e8c4c8ff4

Primary Citations — 6 traced to source

  • MITRE ATLAS - AI Bill of Materials (AML.M0023), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.M0023, AML.M0023 technique entry, 2026
  • EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 53 (Documentation Obligations for General-Purpose AI Models), 2024

+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.