The Google blog lists a number of companies that are implementing Grafeas.

https://cloudplatform.googleblog.com/2017/10/introducing-gra...

The GitHub repository is here. https://github.com/Grafeas/Grafeas

The GitHub README.md has the most concise description of Grafeas, which is a metadata API specification. It further explaisn note and occurrence. I think that reading through the README.md of the Grafeas project first might help to understand the blogs by Google and IBM.

https://github.com/Grafeas/Grafeas/blob/master/README.md

When can I use this as part of the IBM Cloud? Any speculation? Can I use it on the Google Cloud? It seems like Black Duck integrating it with the Google Cloud https://blog.blackducksoftware.com/black-duck-google-grafeas

Or, do I need to install this myself?

I just saw this TechCrunch article on the topic by Frederic Lardinois https://techcrunch.com/2017/10/12/google-ibm-and-others-laun...