Explanation

Supply chain risk in LLM systems spans model providers, training datasets, plugin ecosystems, and software dependencies. Compromised upstream assets can silently alter downstream behavior and security posture. Because these systems are compositional, trust assumptions must be continuously validated.