Skip to content

Improve model supply chain provenance gates#1601

Open
xianzuyang9-blip wants to merge 1 commit into
UnitOneAI:mainfrom
xianzuyang9-blip:codex/model-supply-chain-provenance-gates
Open

Improve model supply chain provenance gates#1601
xianzuyang9-blip wants to merge 1 commit into
UnitOneAI:mainfrom
xianzuyang9-blip:codex/model-supply-chain-provenance-gates

Conversation

@xianzuyang9-blip
Copy link
Copy Markdown

Summary

  • Closes [REVIEW] model-supply-chain: add remote-code and final-artifact provenance gates #1593
  • Adds promotion-registry and final-artifact evidence gates to model-supply-chain.
  • Separates arbitrary third-party mirrors from controlled internal registries with immutable upstream revisions, signed provenance, final deployable artifact digest verification, and restricted write access.
  • Adds explicit remote-code review checks for trust_remote_code=True, custom model classes, tokenizer plugins, conversion scripts, and post-download hooks.

Verification

  • git diff --check
  • rg -n "Promotion registry|trust_remote_code|final deployment artifact|subject.digest|controlled provenance|Internal promotion" skills/ai-security/model-supply-chain/SKILL.md

Bounty

/claim #1593

Preferred payment method: crypto or PayPal after maintainer acceptance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[REVIEW] model-supply-chain: add remote-code and final-artifact provenance gates

1 participant