# AgentBOM

> AgentBOM (Agent Bill of Materials) is an open, vendor-neutral, machine-readable standard for declaring what an AI agent is made of: models, tools, skills, data access, permissions, provenance, and signatures.

AgentBOM complements software bills of materials (SBOMs) with AI-agent-specific composition and authority. The canonical format is JSON, validated against a public JSON Schema. The normative specification and schema are maintained in Git and licensed for open use.

## Essential resources

- [AgentBOM home](https://agentbom.org/): Definition, purpose, composition, and frequently asked questions.
- [Normative specification v1](https://agentbom.org/spec/v1): Scope, conformance, fields, signing, extensions, and security.
- [JSON Schema v1](https://agentbom.org/schema/agentbom-v1.schema.json): Canonical machine-readable schema.
- [Format overview](https://agentbom.org/format): Annotated full document and field reference.
- [Browser verifier](https://agentbom.org/verify): Client-side AgentBOM validation.
- [Quickstart](https://agentbom.org/docs/quickstart): How to create a minimal AgentBOM.
- [Verification guide](https://agentbom.org/docs/verifying): Validation in applications and CI.
- [Signing guide](https://agentbom.org/docs/signing): Canonicalization and detached signatures.
- [Mappings](https://agentbom.org/mappings): Relationship to SBOM, EU AI Act, and RBI FREE-AI.
- [Governance](https://agentbom.org/governance): Open governance, stewardship, and licensing.
- [Full AI-readable reference](https://agentbom.org/llms-full.txt): Expanded definitions and implementation guidance.

## Stable public assets

- Schema: https://agentbom.org/schema/agentbom-v1.schema.json
- Minimal example: https://agentbom.org/examples/minimal.json
- Full example: https://agentbom.org/examples/full.json
- Signed example: https://agentbom.org/examples/signed.json

## Licensing

- JSON Schema and verifier: Apache-2.0
- Normative specification text: CC-BY-4.0