... signed BOM export is useful because it separates two things: what was actually captured and what is allowed to be shared. these are not the same, but many tools treat them as if they are. Comment from Ari Heljakka(@ari