Trust at ClearPoint Logic.

What ships, signed.

An AI Bill of Materials (AI BOM) is a signed manifest of every component that makes up an agent: the model and version, the prompts, the tools and their permissions, the datasets, the libraries, the operator identity, and the policies in force at run time.

Without an AI BOM, you cannot answer the simplest audit questions: what model produced this decision, on which prompt, with what tool access, for which user? Every CPL agent ships with one. Every change is a new signed version.

{
  "aibom_version": "1.2",
  "agent": {
    "id": "agt_compliance_sentinel",
    "name": "Compliance Sentinel",
    "version": "3.4.1",
    "package_digest": "sha256:9f2e1c…7a3b"
  },
  "passport": {
    "id": "pp_8a2c91…",
    "issuer": "anchor.cpl",
    "issued_at": "2026-03-12T14:08:21Z"
  },
  "models": [
    {
      "vendor": "anthropic",
      "name": "claude-sonnet-4.5",
      "role": "primary_reasoning",
      "fingerprint": "claude-sonnet-4.5-20260218"
    }
  ],
  "prompts": [
    { "id": "pr_intake_v8",   "digest": "sha256:c1…" },
    { "id": "pr_summarize_v3","digest": "sha256:b2…" }
  ],
  "tools": [
    { "id": "salesforce_read",   "scopes": ["account.read"] },
    { "id": "evidence_writer",   "scopes": ["bucket.append"] }
  ],
  "datasets": [
    { "id": "kb_policies_2026q1", "rows": 1284, "pii": "redacted" }
  ],
  "dependencies": [
    { "name": "adk-go", "version": "0.42.0" }
  ],
  "policies": ["pol_hipaa_baseline_v6","pol_pii_redact_v2"],
  "signature": {
    "algo": "ed25519",
    "value": "MEUCIQDk…rA=="
  }
}

Replayable runs. Signed traces.

Every agent run produces a signed evidence record: inputs, decision context, tool calls, approvals, model outputs, and the AI BOM in force at the time. Records are append-only, retained per policy, and exportable.