Software Bill of Materials (SBOM) and Open-Source Governance

The contract requires the generation and ongoing maintenance of Software Bill of Materials (SBOMs) and Model Cards for all AI and machine learning components, ensuring full transparency into the open-source software dependencies used within the systems. It mandates strict adherence to open-source licensing requirements and security standards to mitigate legal, compliance, and risk exposure across the supply chain. The work involves continuous monitoring and documentation to verify that all third-party components are properly inventoried, reviewed for license compatibility, and scanned for known vulnerabilities. This is a subcontract under the DTMB agency based in Michigan, classified under NAICS code 541511 for custom computer programming services. The solicitation was posted on August 6, 2026, with a response deadline of August 26, 2026. Although no specific location for performance or point of contact is provided, the work is expected to support federal or state-level systems requiring rigorous open-source governance. The focus is on building and sustaining a compliant, auditable infrastructure for AI/ML components, with an emphasis on proactive risk management and regulatory alignment.