Model Supply Chain

The model supply chain refers to the full set of third-party components an organization depends on to build or run AI systems, including pretrained models, training datasets, open-source libraries, and hosted model APIs. Each of these can introduce risk: a downloaded model file may contain hidden malicious code, a dataset may carry licensing or privacy problems, and a vendor update may silently change how a system behaves. For compliance and risk teams, the concern is that accountability for these inherited risks often sits with the deploying organization, even when the upstream source is outside its control.

1 item

Corporate PolicyUS2026-11-09

Microsoft Agent Security Guide Makes Model Supply Chain a Named Control Requirement

Microsoft has published Secure autonomous agentic AI systems, a guidance document covering how enterprises should select, vet, and monitor the AI models that power their agents. The document addresses model supply-chain governance, adversarial testing, input and output filtering, and controls against unsafe tool use. It directly implicates model inventory programs, version-change approval processes, and ongoing behavioral monitoring in production.

Microsoft agentic AI model supply chain red teaming prompt injection tool-use safety agent security