SBOMs, AI, and the Real Work | Finite State Security Shorts