Finding a vendor-neutral description of SBOMs that isn't enterprisey challenge. Difficulty level: IMPOSSIBLE