Tag

ml-provenance

Safeguard articles tagged "ml-provenance" — guides, analysis, and best practices for software supply chain and application security.

1 article

AI Security

Model Weights as Supply Chain Artifacts: Signing and Provenance

A 4 GB safetensors file deserves the same signing, hashing, and provenance discipline as a container image. How to actually do it with Sigstore, OCI registries, and AIBOMs.

Apr 26, 20266 min read