Ai Vendor Risk

Five public model cards (Llama 3.1, Phi-4, gpt-oss, Gemma 3, Mistral 7B) scored against one 10-point rubric, with what each states and what it leaves out.

Twenty AIBOM questions for AI vendors in six groups: why each matters, the field that proves a good answer, the red flag, and contract clauses to ask for.