Model Cards

CycloneDX, SPDX 3.0, Croissant, the EU forms and five card templates in one table: who owns each, what it covers, its legal status and who should use it.

Hugging Face, Google Model Cards and IBM AI FactSheets compared section by section, plus the CycloneDX modelCard mapping and a 10-point good-card check.

Five public model cards (Llama 3.1, Phi-4, gpt-oss, Gemma 3, Mistral 7B) scored against one 10-point rubric, with what each states and what it leaves out.

The AIBOM fields for metrics, intended use, out-of-scope use, limitations and risk in CycloneDX, SPDX 3.0 and model cards, with fictional numbers and gaps.