Skip to main content

Supply-chain & dependency standard

Agents pull dependencies confidently — sometimes ones that don't exist (hallucinated) or are malicious look-alikes (typosquats). This standard is the defence.

The rules​

  • Allowed-licence list — only approved licences; copyleft handled per policy.
  • Provenance — trusted registries, version pinning, lockfiles committed.
  • SBOM on every build (CycloneDX) — always know what's shipped.
  • Artefact signing (SLSA) — provenance you can verify.
  • Automated update flow with agent-assisted triage — but a human approves.
  • The hard rule: agents may not add a new dependency without explicit human approval in the PR. This is the single most important line — it stops hallucinated and typosquatted packages entering the supply chain.

Intake​

Anything genuinely new passes the dependency & AI-tool intake gate — automated licence/CVE/maintenance/typosquat checks clear the easy 90% in minutes; humans review the rest. The radar and the security allowlist are the same source of truth.

Standards referenced: SLSA, CycloneDX, OWASP SCVS.