CoSAI releases AIMM: a three-level maturity model for AI/ML supply chain trust and provenance

CoSAI Workstream 1 releases the Artifact Integrity Maturity Model (AIMM), a risk-tiered framework for AI/ML supply chain trust and provenance, used to answer how much signing, provenance, and attestation infrastructure a given use case needs. AIMM defines three levels: Level 1 basic artifact integrity, where producers hash and sign artifacts at the release boundary and consumers recompute hashes and verify signatures before artifacts enter the pipeline; Level 2 provenance and lineage, adding signed provenance claims and verifiable lineage between artifacts and transformations, making it easier to locate affected downstream artifacts after an upstream vulnerability disclosure; Level 3 structured attestations for policy automation, evaluated by policy engines and used for admission decisions, suitable for regulated industries and high-risk scenarios. AIMM makes clear that signatures and attestations can only establish integrity, authenticity, provenance, and policy evidence, and do not guarantee that artifacts are correct, secure, or fair, and that fully automated policy enforcement remains a goal in many environments, with most organizations first adopting a hybrid approach of machine-evaluable evidence plus human review.