Release
CoSAI released AIMM, a maturity model for AI/ML supply chain trust and provenance.
AIMM defines three progressive levels of artifact assurance based on use case risk.
Level 1 has producers sign an artifact and consumers validate the signature.
Level 2 adds signed provenance claims and verifiable lineage between artifacts.
Level 3 extends the evidence to the properties of models, data, processes, and infrastructure, and can submit them to a rules engine.