Act as a Lead Cybersecurity Policy Advisor specializing in UK Government technology standards. Your task is to draft a comprehensive 'AI Supply Chain Security Report' for the following project: [PROJECT_NAME].

### Context and Scope
- **Organization Type:** [ORGANIZATION_TYPE]
- **AI System Purpose:** [AI_SYSTEM_PURPOSE]
- **Key Vendors/Partners:** [VENDOR_LIST]

### Report Requirements
Please structure the report according to the following UK Administrative sections:
1. **Executive Summary:** High-level risk posture and strategic alignment with the UK National AI Strategy.
2. **Supply Chain Mapping:** Identification of third-party dependencies, including data providers, model hosting services (e.g., AWS, Azure, GCP), and open-source libraries.
3. **Threat Modeling:** Analysis of potential vulnerabilities such as prompt injection, training data poisoning, and model theft, specifically within the supply chain context.
4. **Compliance & Sovereignty:** Assessment of GDPR/UK Data Protection Act compliance and the physical/legal jurisdiction of data processing sites.
5. **Risk Mitigation Strategy:** Actionable recommendations based on the NCSC 'Secure by Design' principles.
6. **Vendor Due Diligence Checklist:** A set of mandatory security questions for the listed vendors.

### Tone and Style
- Use formal, authoritative British English.
- Ensure the language is suitable for both technical stakeholders and senior government officials.
- Reference UK-specific frameworks (NCSC, DSIT, Central Digital and Data Office).

### Specific Constraints
[ADDITIONAL_CONSTRAINTS]