HD Field Guide 14
Secure the AI supply chain
Track model, dataset, provider, library and connector provenance so material changes do not silently change risk.
Control areaGovernance
AudienceLeaders, risk & technical teams
Reading time8 min
Reviewed11 August 2026
AI systems depend on providers, models, datasets, software and connections. Ownership and change visibility matter.
Know what can change
Document components that update independently.
Require review for material provider and model changes.
Verify integrity and exit
Protect configuration and provenance evidence.
Test export and deletion if a supplier is replaced.
Before you close the guide
- Component inventory
- Provenance recorded
- Supplier changes reviewed
- Rollback and exit tested
Continue with primary guidance
Defensive guidance boundary
This guide provides general educational information. Adapt it to your organisation’s policies, contracts, legal obligations and incident process. For an active incident, use trusted professional and official support channels.