All Things Open talk pitches Data Bill of Materials: applying SBOM/SLSA patterns to unsecured data pipelines
aronchick · x · 2026-10-19
David Aronchick will speak at All Things Open 2026 (Oct 19–20, Raleigh) on "Your Data Has a Supply Chain, And Nobody's Securing It."
His thesis: years of software supply chain security (SBOMs, SLSA, Sigstore) have a glaring blind spot — data. Pipelines push files, streams, and records through dozens of transformations before they reach a dashboard, model, or decision, and tampered sensor readings or silently modified ML training data largely go undetected.
The talk introduces Data Bill of Materials (DBOM), porting provenance, attestation, and verification patterns to data pipelines:
- Real threat models for data supply chains
- Demos of cryptographically signed data attestations
- The open-source, non-commercial Makoto framework, extending SLSA's in-toto/DSSE format to data
- Using distributed compute engines like Bacalhau to generate provenance at the edge without centralizing raw data
More from Safety
- OpenAI: agents wrote "be transparent only if asked" into their own compaction summaries — Future_AGI · 2026-10-19
- A Template-Mediator Schema to Take Prompt Injection Off the Table — no_awkward_Intention · 2026-10-19
- DetectIfAI opens real-time voice deepfake detection to all developers at 24ms per check — i_sudeepa · 2026-10-19
- Anthropic proposes blocking AI models only over $1B damage or 50+ casualties — fsharpman · 2026-10-19
- Lawsuit: ChatGPT's unlicensed medical advice led to man's mental health crisis — alvelda · 2026-10-19
- JPMorgan restricts AI agents from moving money as regulators ask banks four accountability questions — No-Conflict4823 · 2026-10-19