BAIM – Bill of AI Materials

• Component hashes and types
• Signing/attestation (when provided)
• Known-bad fingerprints
• Risk flags: unknown source, tamper suspicion, license conflicts