{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:s46-devstral-small-2-24b-2512-q4_K_M",
  "version": 1,
  "metadata": {
    "component": {
      "bom-ref": "model:s46/devstral-small-2-24b@2512-q4_K_M",
      "name": "s46/devstral-small-2-24b",
      "type": "machine-learning-model",
      "version": "2512-q4_K_M"
    },
    "properties": [
      {
        "name": "s46:v1-format",
        "value": "gguf"
      },
      {
        "name": "s46:private-holdout",
        "value": "false"
      },
      {
        "name": "s46:plan-digest",
        "value": "sha256:412d6d622645f93f283cd909bdc400f2788042ad0c1306d4a9bc2b2b8ebe0259"
      },
      {
        "name": "s46:policy-digest",
        "value": "sha256:45f9edbe413608fb7df72bcb310d8b3be0571a1b235f244e38acc8cac21b4a92"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "model:s46/devstral-small-2-24b@2512-q4_K_M",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d14ba9edee1bb4c4996a726deb81e49ae81800a3216f0774634238c380aee496"
        }
      ],
      "name": "s46/devstral-small-2-24b",
      "properties": [
        {
          "name": "s46:format",
          "value": "gguf"
        },
        {
          "name": "s46:backend-model",
          "value": "devstral-small-2:24b-instruct-2512-q4_K_M"
        },
        {
          "name": "s46:shard-merkle-root",
          "value": "sha256:ebf43de7981c11f585b608f8b9ac8b3f4fa6b385345e0b3e282d1a9a12adc12a"
        }
      ],
      "purl": "pkg:generic/s46%2Fdevstral-small-2-24b@2512-q4_K_M",
      "type": "machine-learning-model",
      "version": "2512-q4_K_M"
    },
    {
      "bom-ref": "source:upstream-build-input",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "evidence/source-snapshot.json"
        }
      ],
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ded5bdd743d563eb2f2ddb9bbf9dc506daa45e2dd2c3a54ed11dad60e4c6e0d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MISTRAL-MRL"
          }
        }
      ],
      "name": "upstream-build-input",
      "type": "file",
      "version": "6e458b8add42681bfd023de5eab93637694aaf82"
    },
    {
      "bom-ref": "transform:huggingface-lfs-api-v1",
      "name": "huggingface-lfs",
      "properties": [
        {
          "name": "s46:transform-kind",
          "value": "upstream-prebuilt-import"
        },
        {
          "name": "s46:container-digest",
          "value": ""
        },
        {
          "name": "s46:command",
          "value": "verify Hugging Face LFS file unsloth/Devstral-Small-2-24B-Instruct-2512-GGUF@6e458b8add42681bfd023de5eab93637694aaf82:Devstral-Small-2-24B-Instruct-2512-Q4_K_M.gguf"
        },
        {
          "name": "s46:input-sha256",
          "value": "ded5bdd743d563eb2f2ddb9bbf9dc506daa45e2dd2c3a54ed11dad60e4c6e0d2"
        },
        {
          "name": "s46:output-sha256",
          "value": "d14ba9edee1bb4c4996a726deb81e49ae81800a3216f0774634238c380aee496"
        }
      ],
      "type": "application",
      "version": "api-v1"
    },
    {
      "bom-ref": "license-verdict",
      "name": "license verdict",
      "properties": [
        {
          "name": "s46:status",
          "value": "passed"
        },
        {
          "name": "s46:required-gates",
          "value": "restricted-license-release"
        }
      ],
      "type": "data"
    },
    {
      "bom-ref": "eval:s46-mvp-gsm8k-slice-v0-mvp-public-slice-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/openai/grade-school-math"
        }
      ],
      "name": "s46-mvp-gsm8k-slice-v0",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "252decb7736c3956e54fff6a24dbb0190ac9f146856b925d09d457cd3b3f3bf5"
        },
        {
          "name": "s46:config-path",
          "value": "public/benchmark-configs/s46-mvp-gsm8k-slice-v0-config.json"
        },
        {
          "name": "s46:public",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "mvp-public-slice-2026-05"
    },
    {
      "bom-ref": "eval-raw:s46-mvp-gsm8k-slice-v0-raw-results",
      "externalReferences": null,
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b778ae76971f12538c74b487a8564be954be51a7efd909c2f2fd883b53cddf45"
        }
      ],
      "name": "s46-mvp-gsm8k-slice-v0-raw-results",
      "type": "file"
    },
    {
      "bom-ref": "canary:bigbench-canary-guid-not-reproduced-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "bigbench-canary-guid-not-reproduced",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "4712b2901128d4d658284bc51957667f8fe614b0d648aea85303ddd12ec3818c"
        },
        {
          "name": "s46:prompt-digest",
          "value": "02af624d5632d95ef2e28b4aa501fbae29b880ec95b1af27f7051dbcad093a50"
        },
        {
          "name": "s46:output-digest",
          "value": "ea37a0f47b3361b8254bc545cf75f65cf82488895c42211579ebb3210466f306"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "canary:must-refuse-credential-theft-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "must-refuse-credential-theft",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "4712b2901128d4d658284bc51957667f8fe614b0d648aea85303ddd12ec3818c"
        },
        {
          "name": "s46:prompt-digest",
          "value": "45df0b711d5687ae163a40508084cb7ddd00e1bc89d6420cb03fc7fb2fd96acd"
        },
        {
          "name": "s46:output-digest",
          "value": "e392d3fbfc7d233a74e51dbd4386c5d0f46f73152db7fde41bb6093ffed093b3"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "canary:must-refuse-dangerous-chemical-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "must-refuse-dangerous-chemical",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "4712b2901128d4d658284bc51957667f8fe614b0d648aea85303ddd12ec3818c"
        },
        {
          "name": "s46:prompt-digest",
          "value": "0df3806e57454c1c8353bf79f79d7358cda0fdc90781ece6199009ad2fe452e5"
        },
        {
          "name": "s46:output-digest",
          "value": "32c7be33c17025b8ea3e614288a6599f9d07368f0dc7612ed3c21818ae7d0206"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "canary:golden-exact-s46-compat-ok-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "golden-exact-s46-compat-ok",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "4712b2901128d4d658284bc51957667f8fe614b0d648aea85303ddd12ec3818c"
        },
        {
          "name": "s46:prompt-digest",
          "value": "5c20a429ea25dc4ca5148590aa3bfe94765668b4e9725a772defb2b5af31c7c7"
        },
        {
          "name": "s46:output-digest",
          "value": "fc46422a6dc33a9da610b934e91bacd1a244345903366e764e4afbf4915f09a2"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "canary:golden-arithmetic-2-plus-2-2026-05",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://models.s46.dev/audit/v1/canaries/s46-public-canary-v1.json"
        }
      ],
      "name": "golden-arithmetic-2-plus-2",
      "properties": [
        {
          "name": "s46:config-digest",
          "value": "4712b2901128d4d658284bc51957667f8fe614b0d648aea85303ddd12ec3818c"
        },
        {
          "name": "s46:prompt-digest",
          "value": "f8eb339591185f9341610637460bebd221d24ba4b87240b1a3934fdb0c7e3298"
        },
        {
          "name": "s46:output-digest",
          "value": "4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a"
        },
        {
          "name": "s46:passed",
          "value": "true"
        }
      ],
      "type": "data",
      "version": "2026-05"
    },
    {
      "bom-ref": "scanner-summary",
      "name": "s46-gguf-static-scanner",
      "properties": [
        {
          "name": "s46:findings",
          "value": "0"
        },
        {
          "name": "s46:high-findings",
          "value": "0"
        },
        {
          "name": "s46:sarif-sha256",
          "value": "476dc56285a00b70f78099f39cd3fc4b072b9988609be64f0a9c63fe0e52c3fe"
        }
      ],
      "type": "application",
      "version": "0.1.0"
    },
    {
      "bom-ref": "backdoor-summary",
      "name": "s46-public-backdoor-probes",
      "properties": [
        {
          "name": "s46:findings",
          "value": "2"
        },
        {
          "name": "s46:high-findings",
          "value": "0"
        },
        {
          "name": "s46:sarif-sha256",
          "value": "f6566793c86e2bf7248de78704b3b81ae80d4cbef6d3a2ac4bd085cde0479eda"
        }
      ],
      "type": "application",
      "version": "0.1.0"
    },
    {
      "bom-ref": "provenance:Devstral-Small-2-24B-Instruct-2512-GGUF",
      "name": "https://huggingface.co/unsloth/Devstral-Small-2-24B-Instruct-2512-GGUF",
      "properties": [
        {
          "name": "s46:reported-slsa-level",
          "value": "0"
        },
        {
          "name": "s46:ephemeral",
          "value": "false"
        },
        {
          "name": "s46:statement-sha256",
          "value": "fa405f9e008e66d34b0b2418912950398b1317d7ac4889c684e8580fa3068d32"
        }
      ],
      "type": "application",
      "version": "https://sovereign46.dev/buildtypes/upstream-prebuilt/huggingface-lfs/v1"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "source:upstream-build-input",
        "transform:huggingface-lfs-api-v1",
        "license-verdict",
        "eval:s46-mvp-gsm8k-slice-v0-mvp-public-slice-2026-05",
        "eval-raw:s46-mvp-gsm8k-slice-v0-raw-results",
        "canary:bigbench-canary-guid-not-reproduced-2026-05",
        "canary:must-refuse-credential-theft-2026-05",
        "canary:must-refuse-dangerous-chemical-2026-05",
        "canary:golden-exact-s46-compat-ok-2026-05",
        "canary:golden-arithmetic-2-plus-2-2026-05",
        "scanner-summary",
        "backdoor-summary",
        "provenance:Devstral-Small-2-24B-Instruct-2512-GGUF"
      ],
      "ref": "model:s46/devstral-small-2-24b@2512-q4_K_M"
    }
  ],
  "properties": [
    {
      "name": "s46:lineage",
      "value": "source,transform,license,evaluation,scanner,compatibility,provenance"
    }
  ]
}