Model Artefact Integrity

Model Artefact Integrity A workflow diagram generated by Archify. 01 / Build pipeline 02 / Layer 02 Inventory & Transparency 03 / Layer 04 Runtime Controls & Observability EX / Load refused Build + sign Register Verify + load Training build · safetensors out · Build pipeline › Build + sign Training build safetensors out Sign manifest · every file digest · Build pipeline › Build + sign Sign manifest every file digest Build provenance · how and from what · Build pipeline › Build + sign Build provenance how and from what Third-party model · pinned by digest · Layer 02 Inventory & Transparency › Build + sign · scanned Third-party model pinned by digest scanned Registry entry · digest, signer, AIBOM · Layer 02 Inventory & Transparency › Register Registry entry digest, signer, AIBOM Verify before load · signature and digests · Layer 04 Runtime Controls & Observability › Verify + load Verify before load signature and digests Model serves · evidence record · Layer 04 Runtime Controls & Observability › Verify + load Model serves evidence record Load refused · mismatch recorded · Load refused › Verify + load Load refused mismatch recorded manifest register deploy attest re-host mismatch match Legend Agent logic Policy Context / trace External system

Signed at build

  • • A manifest lists every model file and its digest, and the manifest is signed
  • • Provenance records what built the artefact, by what process, from which inputs
  • • Safe tensor formats by default; code-executing formats are scanned or refused

Registered by digest

  • • Third-party models are pulled by digest, scanned and re-hosted
  • • The registry entry holds digest, signer, provenance and the AIBOM link

Verified before load

  • • Serving refuses a signature, digest or provenance mismatch
  • • Every load, allowed or refused, writes an evidence record
  • • What runs is provably what was built and evaluated