site_name: agent-bom site_description: "AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach" site_url: https://koda-ai-studio.github.io/agent-bom repo_url: https://github.com/koda-ai-studio/agent-bom repo_name: koda-ai-studio/agent-bom edit_uri: edit/main/site-docs/ docs_dir: site-docs theme: name: material logo: assets/brand/mark-mono.svg favicon: assets/brand/mark.svg palette: - scheme: default primary: indigo accent: indigo toggle: icon: material/brightness-7 name: Switch to dark mode - scheme: slate primary: indigo accent: indigo toggle: icon: material/brightness-4 name: Switch to light mode features: - navigation.instant - navigation.tabs - navigation.sections - navigation.top - search.suggest - search.highlight - content.code.copy - content.action.edit icon: repo: fontawesome/brands/github plugins: - search - mkdocstrings: handlers: python: paths: [src] options: show_source: true show_root_heading: true heading_level: 2 members_order: source show_signature_annotations: true separate_signature: true markdown_extensions: - admonition - pymdownx.details - pymdownx.superfences: custom_fences: - name: mermaid class: mermaid format: !!python/name:pymdownx.superfences.fence_code_format - pymdownx.tabbed: alternate_style: true - pymdownx.highlight: anchor_linenums: true - pymdownx.inlinehilite - pymdownx.snippets - tables - attr_list - md_in_html - toc: permalink: true extra: social: - icon: fontawesome/brands/github link: https://github.com/koda-ai-studio/agent-bom - icon: fontawesome/brands/python link: https://pypi.org/project/agent-bom/ nav: - Home: index.md - Getting Started: - Installation: getting-started/install.md - Quick Start: getting-started/quickstart.md - MCP Server Setup: getting-started/mcp-server.md - Features: - Scanning & Discovery: features/scanning.md - Accuracy on Real Repositories: features/real-repository-accuracy.md - Cloud Posture and IaC Gates: features/cloud-posture.md - Exceptions and Policy for IaC: features/iac-exceptions-policy.md - Blast Radius: features/blast-radius.md - Cloud Normalization: features/cloud-normalization.md - Compliance: features/compliance.md - Registry: features/registry.md - Runtime Proxy: features/runtime-proxy.md - SBOM Generation: features/sbom.md - Hardware/Firmware Evidence Ingest: features/hardware-evidence.md - GPU and AI Infrastructure: features/gpu-ai-infrastructure.md - Policy Engine: features/policy.md - Import Lake Evidence: deployment/lake-evidence-ingestion.md - Executive Brief: deployment/executive-brief.md - Deployment: - Overview: deployment/overview.md - Deploy Quickstart: deployment/quickstart.md - Product Boundaries: deployment/product-boundaries.md - Paved Paths: - One-machine Docker Pilot: deployment/docker.md - Vanilla EKS Quickstart: deployment/eks-vanilla-quickstart.md - Your Own AWS / EKS: deployment/own-infra-eks.md - Focused EKS MCP Pilot: deployment/eks-mcp-pilot.md - Snowflake POV: deployment/snowflake-pov.md - Runtime and Fleet: - Endpoint Fleet: deployment/endpoint-fleet.md - Proxy vs Gateway vs Fleet: deployment/proxy-vs-gateway-vs-fleet.md - Runtime Operations: deployment/runtime-operations.md - Gateway Auto-Discovery: deployment/gateway-auto-discovery.md - Enterprise Controls: - Hosted Authenticated Instance + Connect Your Cloud: deployment/authenticated-hosted-instance.md - Enterprise Auth and Tenancy: deployment/enterprise-auth-and-tenancy.md - Data Access Boundaries: deployment/data-access-boundaries.md - Customer Data and Support Boundary: deployment/customer-data-and-support-boundary.md - Data Retention by Class: deployment/data-retention.md - Audit Chain vs Compliance Signing: deployment/audit-and-compliance-verification.md - Operations Reference: - Packaged API + UI Control Plane: deployment/control-plane-helm.md - Postgres Provisioning Workflow: deployment/postgres-provisioning.md - LLM Key Exposure Drill: deployment/llm-key-exposure-drill.md - Backup and Restore Runbook: deployment/backup-restore.md - Air-Gapped Image Bundle: deployment/airgapped-image-bundle.md - Performance, Sizing, and Benchmarks: deployment/performance-and-sizing.md - Scaling SLOs and Autoscaling: deployment/scaling-slo.md - Worker and Scheduler Concurrency: deployment/worker-and-scheduler-concurrency.md - SIEM Integration: deployment/siem-integration.md - Posture Event Streaming: deployment/posture-event-streaming.md - Grafana Dashboard: deployment/grafana.md - Specialized Reference: - Deployment Modes and Alignment: deployment/deployment-modes-and-alignment.md - AWS Company Rollout: deployment/aws-company-rollout.md - Enterprise MCP / Endpoint Pilot: deployment/enterprise-pilot.md - Terraform AWS Baseline: deployment/terraform-aws-baseline.md - Terraform Azure Ingestion: deployment/terraform-azure-ingestion.md - Control-Plane Data Model and Store Parity: deployment/control-plane-data-model.md - Backend Parity: deployment/backend-parity.md - Backend and Security-Lake Strategy: deployment/backend-and-security-lakes.md - Snowflake-Native Backend: deployment/snowflake-backend.md - Kubernetes: deployment/kubernetes.md - Runtime Monitoring: deployment/runtime-monitoring.md - Visual Leak Detection: deployment/visual-leak-detection.md - Architecture: - Overview: architecture/overview.md - How Agent-BOM Works: architecture/how-agent-bom-works.md - Unified Platform Control Plane: architecture/unified-platform-control-plane.md - AI Governance Control Plane: architecture/ai-governance-control-plane.md - Self-Hosted Product Architecture: architecture/self-hosted-product-architecture.md - UI, API, Auth, and Session Model: architecture/auth-and-session-model.md - Security Graph Model: architecture/security-graph-model.md - Hosted Product Control Plane: architecture/hosted-product-spec.md - AI Infrastructure Scanning: architecture/ai-infrastructure.md - AI-BOM Coverage Map: architecture/ai-bom-coverage.md - Data Ingestion and Security: architecture/data-ingestion-and-security.md - Agentic Skills Architecture: architecture/agentic-skills-architecture.md - Supply Chain and Trust: architecture/supply-chain-and-trust.md - Canonical Model vs OCSF: architecture/canonical-vs-ocsf.md - Reference: - MCP Tools: reference/mcp-tools.md - Agentic Workflow Matrix: reference/agentic-workflows.md - Assistant Command Safety: reference/assistant-command-safety.md - CLI Commands: reference/cli.md - CLI Debug Guide: reference/cli-debug.md - CLI Exit Codes and HTTP Status Mapping: reference/exit-codes.md - Cloud Posture Grading: reference/cloud-posture-grading.md - Remediate Output Contract: reference/remediate-output.md - Configuration: reference/configuration.md - Integrations: - GitHub Action: integrations/github-action.md - Smithery: integrations/smithery.md - API Reference: - Python API: api/python-sdk.md - Go SDK: api/go-sdk.md - Models: api/models.md - Output: api/output.md - Scanners: api/scanners.md - Parsers: api/parsers.md - Extension Entry Points: api/extensions.md - Finding: api/finding.md - Skills: - Overview: skills/index.md - Contributing: contributing.md - Security: security.md - Privacy: privacy.md - Terms: terms.md