You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A free-form text that captures a standard that the AI software complies with.
This includes both published and unpublished standards, such as those developed by ISO, IEEE, and ETSI.
The standard may, but is not necessarily required to, satisfy a legal or regulatory requirement.
What can be improved
There are at least two things we can improved here:
Amend the summary/description to explicitly specify the difference between the two properties and how they can working together
Considering revise the description and making the standardCompliance to be more generic and allow it to be use in non-AI context (in a non-breaking way for SPDX 3.x)
Moving the property to Core Profile will change the IRI and it's a break. But amending the description will not.
Proposal (one of)
Currently, in the AI BOM whitepaper (to be released), @bennetkl distinguished the two in this way:
standardName - standards adhered to but that compliance was not obtained
standardCompliance - standards that compliance are obtained (for example, from a third-party attestation or certification)
The text was updated successfully, but these errors were encountered:
Background
In SPDX 3.0, we have two properties related to standards:
What can be improved
There are at least two things we can improved here:
standardCompliance
to be more generic and allow it to be use in non-AI context (in a non-breaking way for SPDX 3.x)Proposal (one of)
Currently, in the AI BOM whitepaper (to be released), @bennetkl distinguished the two in this way:
standardName
- standards adhered to but that compliance was not obtainedstandardCompliance
- standards that compliance are obtained (for example, from a third-party attestation or certification)The text was updated successfully, but these errors were encountered: