Add per-repo CycloneDX BOM (canonical registry: datasets/SZLHOLDINGS/model-bom)

bom/model-bom.cdx.json

@@ -0,0 +1,140 @@
+{
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5",
+  "serialNumber": "urn:uuid:ca88890a-9fa3-54f5-b600-fc89bfde76cc",
+  "version": 1,
+  "metadata": {
+    "timestamp": "2026-08-31T01:34:34.216664+00:00",
+    "tools": [
+      {
+        "vendor": "SZL Holdings",
+        "name": "build_model_bom",
+        "version": "1.0.0"
+      }
+    ],
+    "component": {
+      "type": "machine-learning-model",
+      "bom-ref": "hf:SZLHOLDINGS/MiniEmbed-Nano",
+      "name": "MiniEmbed-Nano",
+      "version": "unspecified",
+      "description": "HF model SZLHOLDINGS/MiniEmbed-Nano \u2014 base model: undeclared",
+      "licenses": [
+        {
+          "license": {
+            "id": "apache-2.0"
+          }
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "website",
+          "url": "https://huggingface.co/SZLHOLDINGS/MiniEmbed-Nano"
+        }
+      ],
+      "properties": [
+        {
+          "name": "szl:base_model",
+          "value": "undeclared"
+        },
+        {
+          "name": "szl:downloads",
+          "value": "0"
+        },
+        {
+          "name": "szl:likes",
+          "value": "0"
+        },
+        {
+          "name": "szl:last_modified",
+          "value": "2026-08-30T23:30:17.000Z"
+        },
+        {
+          "name": "szl:pipeline_tag",
+          "value": "unspecified"
+        },
+        {
+          "name": "szl:heldout_eval",
+          "value": "MISSING \u2014 required before publication"
+        },
+        {
+          "name": "szl:publication_eligible",
+          "value": "false"
+        }
+      ]
+    }
+  },
+  "components": [
+    {
+      "type": "file",
+      "bom-ref": "file:.gitattributes",
+      "name": ".gitattributes",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:BENCH.laptop-blackwell.json",
+      "name": "BENCH.laptop-blackwell.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:README.md",
+      "name": "README.md",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "documentation"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:TRAINING_RECEIPT.json",
+      "name": "TRAINING_RECEIPT.json",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "config"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "bom-ref": "file:mini_embed.npz",
+      "name": "mini_embed.npz",
+      "scope": "required",
+      "properties": [
+        {
+          "name": "szl:role",
+          "value": "support"
+        }
+      ]
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "hf:SZLHOLDINGS/MiniEmbed-Nano",
+      "dependsOn": [
+        "file:.gitattributes",
+        "file:BENCH.laptop-blackwell.json",
+        "file:README.md",
+        "file:TRAINING_RECEIPT.json",
+        "file:mini_embed.npz"
+      ]
+    }
+  ]
+}