SBOM-for-Agents: The Missing Trust Layer for Agent Supply Chains

Software Bill of Materials (SBOMs) are now mandatory for enterprise software, but AI agents lack this crucial verification tool. When an agent runtime loads a capability from a GitHub repository, it cannot verify key aspects such as implementation, files supporting the capability, approval, license compliance, or security risks. This trust gap in agent supply chains is the issue HURCULES aims to solve.

HURCULES functions as an SBOM-for-Agents, providing a deterministic compiler that turns any repository into a verified, provenance-tracked, human-approved capability package. The process involves deterministic mapping of the repository without executing code, extraction of candidate capabilities, collection of file-level evidence for each capability, devil's advocacy to challenge claims, human approval, and registration of each capability with a unique ID, source repo, commit hash, and approval timestamp.

The benefits of HURCULES are clear for enterprises, developers, and the entire ecosystem. Enterprises can comply with regulations, enhance security, and build trust in their agents. Developers gain safety by loading capabilities without executing untrusted code, and the ability to see precisely which files implement a capability. The ecosystem will benefit from standardization, interoperability, and a verifiable supply chain for agent capabilities.

Although the extraction recall of HURCULES is currently around 0.08-0.10, it is transparently published as proof of discipline. The next steps include improving extraction recall, expanding the registry, integrating with agent runtimes, and adding enterprise features like private-repo ingestion and hosted dashboards. To get involved, developers can try HURCULES, contribute to the project, and spread the word about the importance of SBOM-for-Agents.