AI BOMs are still an emerging practice, but the push for clearer model inventories is starting to reshape how organizations think about governance, supply-chain risk, and incident response.