SBOM for Complex Manufacturing – May 9, 2024
Certain manufacturing processes need to use a software bill of materials for two separate purposes. Semiconductor manufacturing depends on a complex web of suppliers of hardware, materials, and software. The product itself embodies complex software, which the chip manufacturer does not create. The manufacturer depends on the integrity of the chain of custody of the components. When an AI producer decides to build a specialized chip, it develops a software specification for the chip and communicates it to a fab. This spec is software - and transmitted using software. The fab then builds that part, using machinery that it does not build, but which is designed according to the fab’s set of specifications (also software) sent to the tool manufacturer (via software). How dews the tool builder know that the tool meets its design specifications? With automated software test tools. How does the fab know that the tool it purchased meets its requirements? With software test automation tools. How does the AI company know that the chip it ordered conforms to its requirements? You guessed it. And when something doesn’t work, how does the company figure out where the error was introduced?
We are building a tower of Babel. Our standard for code quality is far too low to reliably orchestrate this complex process.