paperJune 2026Unreviewed

AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems

Srimonti Dutta, Akshata Kishore Moharir

Abstract

Agentic AI systems retrieve private context, invoke tools, write files, call external services, coordinate with other agents, and may act without human approval. Existing bill of materials artifacts improve transparency for dependencies, model metadata, and training provenance, but leave an agentic transparency gap: capability opacity, the absence of a structured account of what a deployed agent can access, remember, change, delegate, and prove afterward. This paper introduces AgentRiskBOM, a se

Cite

@misc{dutta2026agentriskbom,
  title = {{AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems}},
  author = {Srimonti Dutta and Akshata Kishore Moharir},
  year = {2026},
  month = jun,
  eprint = {2606.21877},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2606.21877}
}