{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:public-tinystories-2026-05",
  "version": 1,
  "metadata": {
    "component": {
      "bom-ref": "model:s46/tinystories-656k@2026-05-q2_K",
      "name": "s46/tinystories-656k",
      "type": "machine-learning-model",
      "version": "2026-05-q2_K"
    },
    "properties": [
      {
        "name": "s46:v1-format",
        "value": "gguf"
      },
      {
        "name": "s46:private-holdout",
        "value": "false"
      },
      {
        "name": "s46:plan-digest",
        "value": "sha256:45c8a70b1e3eeee5704030bb50f867e02d61a301dc3f32e4a127e1081919fffa"
      },
      {
        "name": "s46:policy-digest",
        "value": "sha256:0c3633e7e37db74bc9b9d3c28df531ea3c11a3cb47c4d9c07d5ad7002ffc4d84"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "model:s46/tinystories-656k@2026-05-q2_K",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5a798ebc1cad921e0ce639b2f10c4bcce492654a79d4b4ca52bd0268416f6b87"
        }
      ],
      "name": "s46/tinystories-656k",
      "properties": [
        {
          "name": "s46:format",
          "value": "gguf"
        },
        {
          "name": "s46:backend-model",
          "value": "tinystories-656k:q2_k"
        },
        {
          "name": "s46:shard-merkle-root",
          "value": "sha256:44eccecb1fa265c86670e6a7d2187a12f4d305d9e52798ac94eb54045bac0c8d"
        }
      ],
      "purl": "pkg:generic/s46%2Ftinystories-656k@2026-05-q2_K",
      "type": "machine-learning-model",
      "version": "2026-05-q2_K"
    },
    {
      "bom-ref": "source:hf-base-safetensors",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "testdata/pipeline/fixtures/TinyStories-656K-model.safetensors"
        }
      ],
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f1b39bf160553848754073d474aa14708343969871f57f3c16eeefcaccd04a5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "hf-base-safetensors",
      "type": "file",
      "version": "b5b4d9e366af050532ff67beb6070d22a865a3e9"
    },
    {
      "bom-ref": "transform:convert_hf_to_gguf.py-fixture-1.0.0",
      "name": "llama.cpp/convert_hf_to_gguf.py",
      "properties": [
        {
          "name": "s46:transform-kind",
          "value": "quantization"
        },
        {
          "name": "s46:container-digest",
          "value": "sha256:7b6163e7ced49733af3f33ddc3430dc13790cfa9ad8a1f97c3cf56282e456698"
        },
        {
          "name": "s46:command",
          "value": "python convert_hf_to_gguf.py --outfile TinyStories-656K-Q2_K.gguf TinyStories-656K-model"
        },
        {
          "name": "s46:input-sha256",
          "value": "f1b39bf160553848754073d474aa14708343969871f57f3c16eeefcaccd04a5d"
        },
        {
          "name": "s46:output-sha256",
          "value": "5a798ebc1cad921e0ce639b2f10c4bcce492654a79d4b4ca52bd0268416f6b87"
        }
      ],
      "type": "application",
      "version": "fixture-1.0.0"
    },
    {
      "bom-ref": "license-verdict",
      "name": "license verdict",
      "properties": [
        {
          "name": "s46:status",
          "value": "passed"
        },
        {
          "name": "s46:required-gates",
          "value": ""
        }
      ],
      "type": "data"
    },
    {
      "bom-ref": "eval:IFEval-public-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/google-research/google-research/tree/master/instruction_following_eval"
        }
      ],
      "name": "IFEval",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "50a027f2ba423aa0398446baac1ac556fdae7395104fbb809dab29f8c78df373"
        },
        {
          "name": "s46:config-path",
          "value": "public/benchmark-configs/ifeval-config.json"
        },
        {
          "name": "s46:public",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "public-2026-05"
    },
    {
      "bom-ref": "eval-raw:ifeval-fixture-raw",
      "externalReferences": null,
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "5a8e8c8a48478370ea0cc95f3ac8dd037c60f5e9ae00cfe3c49e732069db574b"
        }
      ],
      "name": "ifeval-fixture-raw",
      "type": "file"
    },
    {
      "bom-ref": "canary:s46-public-canary-v1-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "s46-public-canary-v1",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "14faa947396ff12aebea3f7d1d13e3b73dd274f420069b52605c2639f30e1aae"
        },
        {
          "name": "s46:prompt-digest",
          "value": "5896b4ca66062d8405d0eaaa0f7e130c9690c10c83a43107f255be87655c67d5"
        },
        {
          "name": "s46:output-digest",
          "value": "fb9382fc7ab3a6a6a74d35c279e86cb8de36d8835e6a12ca71292b243cb3021c"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "scanner-summary",
      "name": "fixture-model-scanner",
      "properties": [
        {
          "name": "s46:findings",
          "value": "0"
        },
        {
          "name": "s46:high-findings",
          "value": "0"
        },
        {
          "name": "s46:sarif-sha256",
          "value": "3ea2b2f4abc5e8b50470f22c04285d8aef568396e4e6f4e4cc9ad901ff490b7d"
        }
      ],
      "type": "application",
      "version": "1.0.0"
    },
    {
      "bom-ref": "backdoor-summary",
      "name": "fixture-backdoor-scanner",
      "properties": [
        {
          "name": "s46:findings",
          "value": "0"
        },
        {
          "name": "s46:high-findings",
          "value": "0"
        },
        {
          "name": "s46:sarif-sha256",
          "value": "a5222c0ca11e10f2f1da9385ecce69af9e3618f1314279d423a6322cb035998b"
        }
      ],
      "type": "application",
      "version": "1.0.0"
    },
    {
      "bom-ref": "compatibility:llama.cpp-fixture-1.0.0",
      "name": "llama.cpp",
      "properties": [
        {
          "name": "s46:platform",
          "value": "fixture-cpu"
        },
        {
          "name": "s46:passed",
          "value": "true"
        },
        {
          "name": "s46:prompt-digest",
          "value": "sha256:07067c467e7a146eb18dd5cfec4af9ecf2e3a208b329d8b3732cde6534b4251f"
        },
        {
          "name": "s46:output-digest",
          "value": "sha256:737bd93cff72b7c824cc0384c517475d1b857da2be45d05222683ce38bae5ad5"
        }
      ],
      "type": "application",
      "version": "fixture-1.0.0"
    },
    {
      "bom-ref": "provenance:ephemeral-gguf",
      "name": "https://ci.s46.dev/builders/ephemeral-gguf",
      "properties": [
        {
          "name": "s46:reported-slsa-level",
          "value": "3"
        },
        {
          "name": "s46:ephemeral",
          "value": "true"
        },
        {
          "name": "s46:statement-sha256",
          "value": "18717f61106780eb11bf8d74ff7246b6251210939cc4c4df9ae9f36d957ffc3a"
        }
      ],
      "type": "application",
      "version": "https://s46.dev/buildtypes/gguf-quantization/v1"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "source:hf-base-safetensors",
        "transform:convert_hf_to_gguf.py-fixture-1.0.0",
        "license-verdict",
        "eval:IFEval-public-2026-05",
        "eval-raw:ifeval-fixture-raw",
        "canary:s46-public-canary-v1-2026-05",
        "scanner-summary",
        "backdoor-summary",
        "compatibility:llama.cpp-fixture-1.0.0",
        "provenance:ephemeral-gguf"
      ],
      "ref": "model:s46/tinystories-656k@2026-05-q2_K"
    }
  ],
  "properties": [
    {
      "name": "s46:lineage",
      "value": "source,transform,license,evaluation,scanner,compatibility,provenance"
    }
  ]
}