Custom Python inspection
Flag risky execution, shell commands, remote-code loading and network access in collected Python files, without executing them.
PUBLIC DEMO / RECORDED EVIDENCE
See the checks.
Inspect the evidence.
Explore recorded integrity, repository and security evidence for selected public model files. See what was checked, what changed, and what still needs review.
Explore security coverage ↓
CONNECTED INTELLIGENCE · VERIFIABLE BY DESIGNSECURITY / INSPECTION COVERAGE
Understand what each check can tell you.
JSON security checks
Inspect collected configurations for malformed JSON, duplicate keys, excessive nesting, custom-code settings and suspicious file references.
Downloaded-file scanning
Antivirus signatures, supported Pickle/PyTorch content inspection and Safetensors structure checks. Reports distinguish completed and incomplete scans.
Known vulnerability checks
Compare collected, exactly pinned Python dependencies with OSV advisories. Uncollected or unsupported dependencies lack this coverage.
Revision & change evidence
Compare available repository evidence with the enrolled baseline. File integrity and repository changes are separate observations.
Dated security findings
Review saved PASS, REVIEW or BLOCK decisions. New findings and lost coverage are compared with prior compatible inspections where recorded.
PASS · Configured checks passedREVIEW · Findings or incomplete coverageBLOCK · Blocking indicators found
These describe available checks, not results for the records below. JSON inspection covers supported collected configurations up to 32 KiB and 32 nesting levels. Other source, format and scanner limits apply. Read the full inspection limits →
PUBLIC MODEL / RECORDED RESULTS
Evidence in focus.
Every result, its context, and the details behind it.
0Need attention
1Recent verified checks
1Demonstration records
Attention items appear first. Checks are scheduled daily and marked overdue after 30 hours. All recorded times include their UTC offset. Reloading retrieves published results; it does not start a check.
MODEL X / INSPECTION RECORD
hf:sentence-transformers/paraphrase-MiniLM-L3-v2@4ca70771034acceecb2e72475f72050fcdde4ddc
Files verified at last checkLast checked: · 65 recorded checks
1 of 1 recorded file(s) downloaded and matched the expected checksums.
Recommended next stepNo integrity action is indicated by this check. Verify your own recovery coverage before relying on these files.
What changed?
No recorded file-result change since the previous check. This is not continuous uptime evidence.
Compared with: 2026-11-12T16:00:38.226633+00:00
Review file evidence
Manifest SHA-256: b75e94ffd6045fab34b83da984a7d92b284070db1cc177a6fb9f8a49789fb1df
- model.safetensors
Recorded result: verified
Downloaded file size: 69,569,488 bytes. Expected: 69,569,488 bytes. Size matched.
Expected SHA-256: cf1e4e2d420c664973037c3c73125d7a8fc69952495093ef8f50596f8943a433Observed SHA-256: cf1e4e2d420c664973037c3c73125d7a8fc69952495093ef8f50596f8943a433
Repository & metadata
No repository metadata changes observed.
Metadata checked: 2026-11-13T15:27:11.762353+00:00
Enrolled revision: 4ca70771034acceecb2e72475f72050fcdde4ddc
Observed upstream revision: 4ca70771034acceecb2e72475f72050fcdde4ddc
Compared with previous successful observation. Daily checks inspect configuration, tokenizer, generation, dependency files and custom Python code without executing the model or its code. Code changes and custom-code references may require review before loading a model.
Enrolled Baseline
Compare the monitored metadata with the enrolled revision.
No differences from the enrolled baseline in the monitored metadata.
Changes since the previous observation
Scope: README.md, LICENSE, LICENSE.md, LICENSE.txt, config.json, configuration.json, tokenizer_config.json, special_tokens_map.json, generation_config.json; up to 24 discovered dependency and Python files. Text files are inspected up to 32 KiB each. This is change detection, not package resolution or a vulnerability scan.
Security Gate
PASSRecorded inspection: 2026-11-13T15:27:11.762353+00:00
Security checks & findings
Artifact integrityPassed
Serialization formatPassed
Custom PythonPassed
JSON configurationPassed
Downloaded-file malwarePassed
Dependency advisoriesNo pinned dependencies
Revision provenancePassed
No flagged patterns recorded. Read incomplete checks alongside this result.
model.safetensors
Configured byte inspections completed without detections.
clamav: clear · No antivirus signatures matched within configured limits.
model_format: clear · Safetensors header and byte ranges inspected.
Security comparison: unchanged
PASS is scoped to the recorded checks, not a malware-free guarantee. BLOCK identifies findings for review; it does not automatically stop deployment. File, source and inspection limits apply.
These are selected public demonstration files. Your enrolled models, preservation reports, recovery drills, and downloads stay in your private workspace. Size checks complement SHA-256: identical size does not prove identical bytes. Older reports may lack size evidence. Neither check proves continuous uptime, model quality, or a working recovery copy.