SBOM Conformance Report

Project: Aether-7B-5Attn · Generated: 2026-07-21T00:37:02Z · Format: CycloneDX

How to fill the gaps

Each element below is advisory and does not affect the result. The fragment shows the shape that would satisfy it.

SBOM author signature

"signature": {
  "algorithm": "ES256",
  "value": "MEUCIQD…"
}

Reference: https://cyclonedx.org/docs/1.7/json/#signature

Dataset description

{
  "type": "data",
  "name": "wikipedia",
  "description": "Cleaned Wikipedia article dumps."
}

Reference: https://huggingface.co/docs/hub/datasets-cards

Dataset identifier

{
  "type": "data",
  "bom-ref": "dataset:wikipedia",
  "purl": "pkg:huggingface/datasets/wikipedia"
}

Reference: https://github.com/package-url/purl-spec

Dataset provenance

"componentData": {
  "governance": { "custodians": [ { "organization": { "name": "Wikimedia" } } ] }
}

Reference: https://cyclonedx.org/capabilities/mlbom/

Dataset license

{
  "type": "data",
  "name": "wikipedia",
  "licenses": [ { "license": { "id": "CC-BY-SA-3.0" } } ]
}

Reference: https://huggingface.co/docs/hub/datasets-cards

Infrastructure hardware (HBOM link)

"externalReferences": [
  { "type": "bom", "url": "https://example.com/hbom.json" }
]

Reference: https://cyclonedx.org/capabilities/hbom/

Regulatory crosswalk

BomLens does not certify or determine compliance with the EU AI Act, the Korean AI Framework Act, or any other regulation. This crosswalk makes documentation gaps visible so a person can prepare; interpreting it against a specific system's legal obligations is a person's job.

EU AI Act — Annex IV technical documentation

Regulation (EU) 2024/1689, Article 11(1) and Annex IV · present 6, gap 7, needs review 10

AI Framework Act (Korea)

인공지능 발전과 신뢰 기반 조성 등에 관한 기본법 (effective 2026-01-22) · present 2, gap 1, needs review 7