AI Supply Chains Extend Beyond the Model to Every Component

Summary

The speaker says an AI system’s supply chain includes models, MCPs, A2A, plugins and skills. Tracking each component and version helps identify changes and verify that pinned code is what you expect.

Key points

• The AI supply chain includes more than the model: it can also include MCPs, A2A, plugins and skills.
• The speaker recommends knowing which version of each component is in use so changes can be identified.
• A pinned version may not be enough if the code received differs from what was expected, such as with a shell plugin.