Format at a glance

{
  "bomFormat": "AgentBOM",
  "specVersion": "1.0",
  "serialNumber": "urn:uuid:8f0d3b2a-3c1e-4f7a-9b2d-1a2b3c4d5e6f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-05T09:30:00Z",
    "authors": [
      {
        "name": "Platform Engineering",
        "organization": "Acme Bank"
      }
    ],
    "producer": {
      "name": "agentbom-cli",
      "version": "1.0.0",
      "url": "https://agentbom.org"
    },
    "agent": {
      "bomRef": "agent-loan-assist",
      "name": "Loan Application Assistant",
      "version": "2.3.1",
      "description": "Assists loan officers by summarizing applications and flagging missing documents.",
      "type": "copilot",
      "autonomyLevel": "act-with-approval",
      "maintainer": {
        "name": "Acme Bank Digital Lending",
        "url": "https://acmebank.example"
      },
      "identifiers": ["pkg:internal/acme/loan-assist@2.3.1"]
    }
  },
  "models": [
    {
      "bomRef": "model-primary",
      "role": "primary",
      "provider": "self-hosted",
      "name": "qwen2.5-32b-awq",
      "version": "2025.04",
      "hosting": "on-prem",
      "region": "in-south-1",
      "digest": "sha256:9b74c9897bac770ffc029102a200c5de93f47e5f4f8a1f6e2c9b0d1a2b3c4d5e"
    },
    {
      "bomRef": "model-embed",
      "role": "embedding",
      "provider": "self-hosted",
      "name": "bge-m3",
      "hosting": "on-prem",
      "region": "in-south-1"
    },
    {
      "bomRef": "model-guard",
      "role": "guardrail",
      "provider": "self-hosted",
      "name": "qwen2.5-7b-awq",
      "hosting": "on-prem",
      "region": "in-south-1"
    }
  ],
  "tools": [
    {
      "bomRef": "tool-corebanking",
      "name": "Core Banking Lookup",
      "type": "mcp-server",
      "protocol": "mcp",
      "endpoint": "https://mcp.internal.acmebank.example/corebanking",
      "scopes": ["accounts:read", "kyc:read"],
      "authMode": "mtls"
    },
    {
      "bomRef": "tool-docstore",
      "name": "Document Store API",
      "type": "rest-api",
      "protocol": "http",
      "endpoint": "https://docs.internal.acmebank.example/v1",
      "scopes": ["documents:read"],
      "authMode": "oauth"
    }
  ],
  "skills": [
    {
      "bomRef": "skill-summarize",
      "name": "application-summary",
      "version": "1.4.0",
      "source": "https://hub.internal.acmebank.example/skills/application-summary",
      "digest": "sha256:1a2b3c4d5e6f70819293a4b5c6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f9"
    }
  ],
  "dataAccess": [
    {
      "bomRef": "data-applications",
      "name": "Loan Applications",
      "source": "corebanking-postgres",
      "classification": "pii",
      "access": "read",
      "retention": "P90D",
      "residency": "in-south-1"
    },
    {
      "bomRef": "data-documents",
      "name": "Uploaded KYC Documents",
      "source": "s3://acme-kyc-documents",
      "classification": "restricted",
      "access": "read",
      "retention": "P365D",
      "residency": "in-south-1"
    }
  ],
  "permissions": {
    "networkEgress": {
      "allowed": true,
      "allowlist": [
        "mcp.internal.acmebank.example",
        "docs.internal.acmebank.example"
      ]
    },
    "canExecuteCode": false,
    "canSpendFunds": false,
    "humanInLoop": true
  },
  "provenance": {
    "buildType": "https://agentbom.org/buildtype/ci-v1",
    "builder": {
      "id": "https://ci.internal.acmebank.example"
    },
    "sourceRepo": "https://git.internal.acmebank.example/lending/loan-assist",
    "commit": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0",
    "producedAt": "2026-06-05T09:29:55Z"
  }
}