{
  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:53c5cf54-d22c-4f0c-b84d-6bd8b04e3196",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-08T19:00:00Z",
    "component": {
      "type": "application",
      "bom-ref": "urn:example:system:support-assistant:2026.09.08",
      "name": "Example Support Assistant",
      "version": "2026.09.08",
      "externalReferences": [
        {
          "type": "bom",
          "url": "https://example.org/boms/support-assistant-software.cdx.json",
          "comment": "Ordinary software SBOM for this release."
        },
        {
          "type": "evidence",
          "url": "https://example.org/assurance/support-assistant-evaluation-2026.09.08.json",
          "comment": "Evaluation evidence for this release."
        },
        {
          "type": "attestation",
          "url": "https://example.org/attestations/support-assistant-2026.09.08.intoto.jsonl",
          "comment": "Signed release attestation."
        },
        {
          "type": "runtime-analysis-report",
          "url": "https://example.org/restricted/runtime/support-assistant/",
          "comment": "Restricted runtime evidence indexed by deployment and request ID."
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:release-id",
          "value": "release-2026.09.08"
        },
        {
          "name": "example.org:aibom:deployment-id",
          "value": "support-assistant-prod-west-001"
        },
        {
          "name": "example.org:aibom:environment",
          "value": "production"
        },
        {
          "name": "example.org:aibom:region",
          "value": "example-west"
        },
        {
          "name": "example.org:aibom:promoted-at",
          "value": "2026-09-08T19:00:00Z"
        },
        {
          "name": "example.org:aibom:rollback-target",
          "value": "release-2026.09.01"
        },
        {
          "name": "example.org:aibom:authority-profile",
          "value": "support-case-create-with-approval-v3"
        }
      ]
    }
  },
  "components": [
    {
      "type": "file",
      "bom-ref": "urn:example:prompt:support-system:7",
      "name": "Support Assistant System Prompt",
      "version": "7",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1111111111111111111111111111111111111111111111111111111111111111"
        }
      ],
      "externalReferences": [
        {
          "type": "configuration",
          "url": "https://example.org/config/prompts/support-system/7"
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:evidence:hash",
          "value": "verifiable-component-fact"
        },
        {
          "name": "example.org:aibom:observed-at",
          "value": "2026-09-08T19:00:00Z"
        }
      ]
    },
    {
      "type": "file",
      "bom-ref": "urn:example:policy:tool-use:3",
      "name": "Tool Use Policy",
      "version": "3",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2222222222222222222222222222222222222222222222222222222222222222"
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:approval-boundary",
          "value": "human-approval-required-before-case-creation"
        }
      ]
    },
    {
      "type": "machine-learning-model",
      "bom-ref": "urn:example:model:embedding:1.2.0",
      "name": "Example Embedding Model",
      "version": "1.2.0",
      "supplier": {
        "name": "Example Model Supplier"
      },
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3333333333333333333333333333333333333333333333333333333333333333"
        }
      ],
      "externalReferences": [
        {
          "type": "model-card",
          "url": "https://example.org/models/embedding-1.2.0/model-card"
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:evidence:model-card",
          "value": "supplier-declaration"
        },
        {
          "name": "example.org:aibom:evidence:hash",
          "value": "verifiable-component-fact"
        }
      ]
    },
    {
      "type": "data",
      "bom-ref": "urn:example:data:support-corpus:2026-09-08",
      "name": "Support Knowledge Snapshot",
      "version": "2026-09-08",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4444444444444444444444444444444444444444444444444444444444444444"
        }
      ],
      "externalReferences": [
        {
          "type": "documentation",
          "url": "https://example.org/data/support-corpus/2026-09-08"
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:evidence:provenance",
          "value": "organisational-assessment"
        },
        {
          "name": "example.org:aibom:sensitivity",
          "value": "internal"
        },
        {
          "name": "example.org:aibom:fresh-until",
          "value": "2026-09-15T19:00:00Z"
        }
      ]
    },
    {
      "type": "data",
      "bom-ref": "urn:example:data:support-index:build-1842",
      "name": "Support Retrieval Index",
      "version": "build-1842",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5555555555555555555555555555555555555555555555555555555555555555"
        }
      ],
      "properties": [
        {
          "name": "example.org:aibom:built-at",
          "value": "2026-09-08T18:20:00Z"
        },
        {
          "name": "example.org:aibom:source-component",
          "value": "urn:example:data:support-corpus:2026-09-08"
        },
        {
          "name": "example.org:aibom:embedding-component",
          "value": "urn:example:model:embedding:1.2.0"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "urn:example:library:ai-client:2.4.1",
      "name": "Example AI Client Library",
      "version": "2.4.1",
      "supplier": {
        "name": "Example Software Supplier"
      }
    }
  ],
  "services": [
    {
      "bom-ref": "urn:example:service:generation-model:prod",
      "provider": {
        "name": "Example Hosted Model Provider"
      },
      "name": "Hosted Generation Model",
      "version": "model-snapshot-2026-08-15",
      "endpoints": [
        "https://api.example.org/v1/generate"
      ],
      "authenticated": true,
      "properties": [
        {
          "name": "example.org:aibom:evidence:model-reference",
          "value": "deployment-observation"
        },
        {
          "name": "example.org:aibom:observed-at",
          "value": "2026-09-08T19:00:00Z"
        },
        {
          "name": "example.org:aibom:lifecycle-status",
          "value": "active"
        },
        {
          "name": "example.org:aibom:automatic-upgrade-policy",
          "value": "disabled"
        }
      ]
    },
    {
      "bom-ref": "urn:example:service:support-case-api:v2",
      "provider": {
        "name": "Example Service Provider"
      },
      "name": "Support Case API",
      "version": "2",
      "endpoints": [
        "https://support.example.org/api/v2/cases"
      ],
      "authenticated": true,
      "properties": [
        {
          "name": "example.org:aibom:tool-authority",
          "value": "create-case-only"
        },
        {
          "name": "example.org:aibom:approval-policy",
          "value": "urn:example:policy:tool-use:3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "urn:example:system:support-assistant:2026.09.08",
      "dependsOn": [
        "urn:example:prompt:support-system:7",
        "urn:example:policy:tool-use:3",
        "urn:example:data:support-index:build-1842",
        "urn:example:library:ai-client:2.4.1",
        "urn:example:service:generation-model:prod",
        "urn:example:service:support-case-api:v2"
      ]
    },
    {
      "ref": "urn:example:data:support-index:build-1842",
      "dependsOn": [
        "urn:example:data:support-corpus:2026-09-08",
        "urn:example:model:embedding:1.2.0"
      ]
    },
    {
      "ref": "urn:example:prompt:support-system:7",
      "dependsOn": []
    },
    {
      "ref": "urn:example:policy:tool-use:3",
      "dependsOn": []
    },
    {
      "ref": "urn:example:model:embedding:1.2.0",
      "dependsOn": []
    },
    {
      "ref": "urn:example:data:support-corpus:2026-09-08",
      "dependsOn": []
    },
    {
      "ref": "urn:example:library:ai-client:2.4.1",
      "dependsOn": []
    },
    {
      "ref": "urn:example:service:generation-model:prod",
      "dependsOn": []
    },
    {
      "ref": "urn:example:service:support-case-api:v2",
      "dependsOn": []
    }
  ]
}