Add per-repo CycloneDX BOM (canonical registry: datasets/SZLHOLDINGS/model-bom)

bom/model-bom.cdx.json

@@ -0,0 +1,244 @@
+{
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5",
+  "serialNumber": "urn:uuid:b14fc78e-34e7-5e50-b1c5-76c2d282cba1",
+  "version": 1,
+  "metadata": {
+    "timestamp": "2026-08-31T01:34:34.206372+00:00",
+    "tools": [
+      {
+        "vendor": "SZL Holdings",
+        "name": "build_model_bom",
+        "version": "1.0.0"
+      }
+    ],
+    "component": {
+      "type": "machine-learning-model",
+      "bom-ref": "hf:SZLHOLDINGS/szl-nemo",
+      "name": "szl-nemo",
+      "version": "unspecified",
+      "description": "HF model SZLHOLDINGS/szl-nemo \u2014 base model: undeclared",
+      "licenses": [
+        {
+          "license": {
+            "id": "apache-2.0"
+          }
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "website",
+          "url": "https://huggingface.co/SZLHOLDINGS/szl-nemo"
+        }
+      ],
+      "properties": [
+        {
+          "name": "szl:base_model",
+          "value": "undeclared"
+        },
+        {
+          "name": "szl:downloads",
+          "value": "5"
+        },
+        {
+          "name": "szl:likes",
+          "value": "0"
+        },
+        {
+          "name": "szl:last_modified",
+          "value": "2026-08-30T23:26:01.000Z"
+        },
+        {
+          "name": "szl:pipeline_tag",
+          "value": "unspecified"
+        },
+        {
+          "name": "szl:heldout_eval",
+          "value": "MISSING \u2014 required before publication"
+        },
+        {
+          "name": "szl:publication_eligible",
+          "value": "false"
+        }
+      ]
+    }
+  },
+  "components": [
+    {
+      "type": "file",
+      "bom-ref": "file:.gitattributes",
+      "name": ".gitattributes",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:BASE_MODEL_MANIFEST.json",
+      "name": "BASE_MODEL_MANIFEST.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:BENCH.laptop-blackwell.json",
+      "name": "BENCH.laptop-blackwell.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:LICENSE",
+      "name": "LICENSE",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:Modelfile",
+      "name": "Modelfile",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:OPERATIONAL.json",
+      "name": "OPERATIONAL.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:README.md",
+      "name": "README.md",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "documentation"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:SZL_ESTATE_MANAGED.json",
+      "name": "SZL_ESTATE_MANAGED.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:TRAINING_RECEIPT.json",
+      "name": "TRAINING_RECEIPT.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:ollama_probe.laptop.json",
+      "name": "ollama_probe.laptop.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:scripts/eval.py",
+      "name": "scripts/eval.py",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:scripts/forge.py",
+      "name": "scripts/forge.py",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:szl_nemo/rules.py",
+      "name": "szl_nemo/rules.py",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "hf:SZLHOLDINGS/szl-nemo",
+      "dependsOn": [
+        "file:.gitattributes",
+        "file:BASE_MODEL_MANIFEST.json",
+        "file:BENCH.laptop-blackwell.json",
+        "file:LICENSE",
+        "file:Modelfile",
+        "file:OPERATIONAL.json",
+        "file:README.md",
+        "file:SZL_ESTATE_MANAGED.json",
+        "file:TRAINING_RECEIPT.json",
+        "file:ollama_probe.laptop.json",
+        "file:scripts/eval.py",
+        "file:scripts/forge.py",
+        "file:szl_nemo/rules.py"
+      ]
+    }
+  ]
+}