Similar Items: Managing Nth-Party Risk in AI Supply Chains: A Framework for Assessing Vendor, Model, and Dependency Risks in Multi-Layered AI Ecosystems