SBOM Minimum Elements in Practice: What Breaks After the First Release

Why SBOM minimum elements fail after the first release, and how identifier choice, version normalisation and timestamps decide whether the data answers an incident question.