{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:839ed4ec-46fb-4166-932b-5b83fd152f44",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-12T23:16:49.182583+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Black Sheep AI"
          },
          "name": "Watchman",
          "version": "0.2.1"
        }
      ]
    },
    "properties": [
      {
        "name": "baa:watchman:audit_id",
        "value": "WM-20260612-9abc1dd9"
      },
      {
        "name": "baa:watchman:library_version",
        "value": "v1"
      },
      {
        "name": "baa:watchman:library_signatures",
        "value": "20"
      },
      {
        "name": "baa:watchman:threshold_detect_conc_thresh",
        "value": "0.313816"
      },
      {
        "name": "baa:watchman:threshold_detect_excess_thresh",
        "value": "-0.306818"
      }
    ]
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "candidate",
      "name": "/data/models/Qwen2.5-1.5B-Instruct",
      "properties": [
        {
          "name": "baa:watchman:role",
          "value": "candidate"
        },
        {
          "name": "baa:watchman:declared_quantization",
          "value": "full-precision"
        },
        {
          "name": "baa:watchman:file:config.json:sha256",
          "value": "98d2ff8cc47488d08a2b0b3acf4eb99ef210779b42bd48605f6b8e36acdbf670"
        },
        {
          "name": "baa:watchman:file:model.safetensors:sha256",
          "value": "dd924a11b4c220f385b51ffa522daea7c9f3d850e31b162bb5661df483c6d3ee"
        }
      ],
      "version": "sha256:ce80e871c38f",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ce80e871c38f590ea678aec7c30309a8448b8ab1a633752a53235503941cc34f"
        }
      ]
    },
    {
      "type": "machine-learning-model",
      "bom-ref": "claimed-base",
      "name": "/data/models/Qwen2.5-1.5B",
      "properties": [
        {
          "name": "baa:watchman:role",
          "value": "claimed-base"
        },
        {
          "name": "baa:watchman:declared_quantization",
          "value": "full-precision"
        },
        {
          "name": "baa:watchman:file:config.json:sha256",
          "value": "0e8c8aa86468aba09c9d32157ff4bc2301c7e6c50e4398960425b2ea71e66f77"
        },
        {
          "name": "baa:watchman:file:model.safetensors:sha256",
          "value": "a961db72e75d52b18e6b0c9d379e51a26973b233385e0e127fdda7d648aec796"
        }
      ],
      "version": "sha256:e141d8c75308",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e141d8c75308085f7f0f0686aec14a70ef30cf9ffeef9b1198b8e2db2141c054"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "candidate",
      "dependsOn": [
        "claimed-base"
      ]
    }
  ],
  "properties": [
    {
      "name": "baa:watchman:verdict",
      "value": "modification-detected"
    },
    {
      "name": "baa:watchman:classification",
      "value": "instruction_tuning"
    },
    {
      "name": "baa:watchman:exit_code",
      "value": "2"
    },
    {
      "name": "baa:watchman:evidence",
      "value": "audit_report.json; audit_report.html"
    },
    {
      "name": "baa:watchman:coverage",
      "value": "1.0"
    }
  ]
}