Supply Chain and Policy Artifacts — Operating Quantum Computers

This appendix provides copyable templates for artifact provenance, execution bills of materials, policy fixtures, and exception records.

Diagram loads as you read

Supply Chain and Policy Artifacts · Figure 1

View diagram source

flowchart LR
    Template[Template] --> Fill[Fill with execution data]
    Fill --> Validate[Validate]
    Validate --> Store[Store with evidence package]

Quantum execution bill of materials

Illustrative listing · yaml

quantum_execution_bom:
  schema_version: 1
  workload_id: qexp-YYYYMMDD-NNN
  owner:
    team: example-team
    technical_owner: person@example.com
    reviewer: reviewer@example.com
  source:
    repository: git@example.com:org/repo.git
    commit: <sha>
    experiment_definition: experiments/example.yaml
  build:
    ci_run_id: <id>
    image_digest: sha256:<digest>
    dependency_lockfile_hash: sha256:<digest>
    sbom_uri: artifacts://sbom/example.spdx.json
  compiler:
    compiler_name: <name>
    compiler_version: <version>
    pass_manager_hash: sha256:<digest>
    target_model_hash: sha256:<digest>
  execution:
    provider: <provider>
    target_id: <target>
    execution_mode: <job|batch|session|reservation>
    shots: 10000
    reservation_id: optional
  calibration:
    snapshot_id: <id>
    collected_at: <timestamp>
    freshness_policy: <policy-id>
  interpretation:
    mitigation_profile: <id>
    statistical_policy: <id>
  approvals:
    policy_bundle: <version>
    decision_id: <id>

Diagram loads as you read

Quantum execution bill of materials · Figure 2

View diagram source

flowchart TB
    QBOM[QBOM] --> Owner[Owner]
    QBOM --> Source[Source]
    QBOM --> Build[Build]
    QBOM --> Compiler[Compiler]
    QBOM --> Execution[Execution]
    QBOM --> Calibration[Calibration]
    QBOM --> Interpretation[Interpretation]
    QBOM --> Approvals[Approvals]

Artifact attestation record

Illustrative listing · yaml

attestation:
  artifact_uri: artifacts://compiled/qexp-001.bundle
  artifact_type: compiled_circuit_bundle
  digest: sha256:<digest>
  producer:
    system: ci
    run_id: <id>
  inputs:
    - uri: git://repo@<sha>
    - uri: artifacts://target-model/<id>
  policy:
    policy_bundle: policy-2026-04
    decision: allow
  signature:
    key_id: <key>
    value: <signature>

Policy fixture

Illustrative listing · yaml

policy_fixture:
  name: public_claim_requires_review
  input:
    user:
      role: research_engineer
    workload:
      claim_intent: public
      shots: 50000
    artifact:
      signed: true
    calibration:
      age_minutes: 12
    budget:
      remaining_units: 10000
  expected:
    decision: review
    reason_codes:
      - public_claim_requires_review

Diagram loads as you read

Policy fixture · Figure 3

View diagram source

flowchart LR
    Fixture[Policy fixture] --> Test[Test runner]
    Test --> Decision[Policy decision]
    Decision --> Expected{Matches expected?}
    Expected -- yes --> Pass[Pass]
    Expected -- no --> Fail[Fail]

Exception record

Illustrative listing · yaml

exception:
  id: qex-2026-04-001
  requested_by: person@example.com
  rule_overridden: calibration_freshness_max_60_minutes
  reason: vendor maintenance window caused delay; benchmark must run in reserved slot
  blast_radius:
    tenants: [research]
    targets: [target-a]
    max_jobs: 4
  compensating_controls:
    - mark all results as exploratory
    - require replication before claim promotion
  expires_at: 2026-04-20T00:00:00Z
  approver: owner@example.com

Supply chain incident scope query

Illustrative listing · yaml

scope_query:
  defective_artifact_digest: sha256:<digest>
  include:
    - jobs
    - evidence_packages
    - reports
    - claims
  time_window:
    start: 2026-04-01T00:00:00Z
    end: 2026-04-19T00:00:00Z

Diagram loads as you read

Supply chain incident scope query · Figure 4

View diagram source

flowchart TB
    Defect[Defective artifact] --> Query[Scope query]
    Query --> Jobs[Affected jobs]
    Query --> Evidence[Affected evidence]
    Query --> Claims[Affected claims]
    Jobs --> Triage[Triage]
    Evidence --> Triage
    Claims --> Triage