119-s-5345119th CongressWALLET

A bill to provide for the delivery of artificial intelligence functional bills of materials, and for other purposes.

Sponsored By: Senator Slotkin, Elissa [D-MI]

Introduced

Summary

Mandatory machine-readable functional bills of materials (FBOMs) for AI contracts. This bill would require contractors to provide and keep up-to-date a detailed FBOM before the Department of Defense may award, renew, or extend any contract for AI-enabled goods or services.

Show full summary
  • Contractors and AI suppliers would need to submit a machine-readable FBOM prior to award and be able to deliver updates within 48 hours. The FBOM would list AI models, software dependencies, datasets, compute and cloud environments, and access and governance details.
  • DoD acquisition and risk teams would get structured data to assess AI-related security and integrity risks. DoD must issue regulations and guidance within 180 days and report to the armed services committees within 1 year on implementation, potential updates to software acquisition pathways, and estimated costs.
  • Cybersecurity and systems managers would get a required framework for protecting FBOMs. The Defense Systems Agency director and the DoD Chief Information Officer would issue storage and access guidance within 180 days covering access controls, digital signing, secure sharing, and centralized repositories.

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Bill Overview

Analyzed Economic Effects

1 provisions identified: 0 benefits, 0 costs, 1 mixed.

Contractors must provide AI component lists

This bill would require contractors selling AI goods or services to the Department of Defense to submit a machine-readable functional bill of materials (FBOM) before a contract is awarded, renewed, or extended. Contractors would have to keep the FBOM updated and deliver a new version within 48 hours if the DoD asks. The FBOM would list models and software (names, versions, lineage, dependencies, and security controls), training and inference data (origins, licenses, locations, and sensitivity), and compute, accelerator, cloud, storage, and networking details. The bill would define "artificial intelligence" by reference to existing law and define "software bill of materials" as normal business records. Within 180 days after enactment, the DoD would issue rules so SBOM policies apply to AI software and the Defense Systems Agency and DoD CIO would give guidance on secure FBOM storage, signing, access controls, and centralized repositories. Within one year, DoD would report to Congress on implementation progress, acquisition pathway changes, and estimated costs.

Sponsors & CoSponsors

Sponsor

Slotkin, Elissa [D-MI]

MI • D

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation