Federal agencies use AI bills of materials to count artificial intelligence assets, reduce shadow AI risk and strengthen zero-trust governance.