The missing layer in AI-assisted development

We have SBOMs for dependencies and signed commits for authorship. Why don't we have provenance for AI contributions? Introducing WHENCE standard