India's CERT-In folds AI into five-inventory supply chain framework most firms haven't started
shashib · x · 2026-08-22
India's CERT-In released v2.0 guidelines in July 2025, consolidating five bill-of-materials categories into one framework: software (SBOM), cryptography (CBOM), quantum (QBOM), hardware (HBOM) and AI (AIBOM). The first version (Oct 2024) covered only SBOM — a structured list of every library and dependency in an application.
The author argues most enterprises haven't even finished SBOM, undermining the rest: CBOM inventories existing crypto assets, QBOM grades them against a quantum clock, while HBOM and AIBOM extend the idea to chips and models. The guidelines are voluntary in India, targeting public sector, government and software export organizations first.
More from Safety
- Anthropic red team's first-ever model "abliteration" cut GLM-5.3 refusals from 90% to 3% for ~$4,400 — cephaloform · 2026-10-16
- Anthropic grants METR employee-like access as independent safety evaluators go public — AnthropicAI · 2026-10-16
- APEX-Harm benchmark: script-based injection attacks easily compromise agents in shared workspaces — KAUST · 2026-10-16
- Residual-stream forecasts predict agent violations before they happen, USC study shows — USC · 2026-10-16
- AI safety drama: risk research called a 'company effort,' team lead responds — logangraham · 2026-10-16
- Brave's Leo adds end-to-end encrypted chat with GLM via attested TEE — gnukeith · 2026-10-16