AAIR: Advanced in AI Risk

Verifiable end-to-end provenance and audit trails provide traceability for the origin, integrity, changes, and custody of externally sourced models and datasets. That evidence enables validation, investigation, and response to tampering or other supplier-originated risk. NIST identifies provenance as a component of supply-chain due diligence and calls for policies addressing risks from third-party software, data, and other supply-chain issues.