# SBOM Diff

Build-time release reference. Runtime readiness, deployment, payment settlement and external indexing are not evaluated here. Prices are proposed; this file cannot authorize execution or payment.

Compare two supported SBOMs by unique exact group/name (default) or versionless generic-PURL identity. Report added/removed components and version/license/hash/PURL/type changes. Duplicate identities are rejected rather than cross-paired. Reference IDs and source positions are ignored; license comparison is textual, not semantic.

Release: 0.29.0. Built: 2026-10-06T15:38:00Z.

## Choose for
- Review deterministic component changes between two caller-supplied SBOMs
- Reject ambiguous duplicates instead of inventing version matches

## Outside this profile
- License equivalence, transitive graph impact or vulnerability analysis
- Inventing matches across renamed packages, ecosystems or duplicate identities

Proposed nominal USD 0.01 per successful call; payer fees excluded. No verified runtime availability.

- [Exact release contract](/reference/services/sbom-diff.json)
- [Input schema](/reference/schemas/sbom-diff.input.json)
- [Output schema](/reference/schemas/sbom-diff.output.json)
- [Fixed example](/reference/examples/sbom-diff.json)
- [Complete HTML reference](/discover/tools/sbom-diff)