How would you secure an AI application's component supply chain?

The dependency graph supports impact analysis: a compromised parser identifies every index it produced, and a changed model identifies prompts, evaluations, and products that rely on it. Reproducible evaluation compares the proposed combination with the deployed one before promotion. Emergency controls quarantine a source, revoke a tool, pin a known model version, or disable a feature independently. Supplier incidents and silent provider updates are tested operational scenarios, not merely contract clauses.