Snyk Evo AI-SPM GA: Three-Agent Architecture Generates Live AI Bill of Materials and Enforces Plain-English Security Policies in CI

Snyk·medium signal

Snyk shipped Evo AI-SPM to GA, governing autonomous coding agents like Claude Code, Cursor, and Devin across the development lifecycle. A Discovery Agent maps the AI attack surface into a live AI-BOM, a Risk Intelligence Agent enriches it with hallucination metrics and security signals, and a Policy Agent translates plain-English governance intent into machine-enforceable CI guardrails. Snyk reports enterprises introduce 3x untracked components per AI model deployed.