How to meet it
OWASP AISVS v1.01
Model Lifecycle Management & Change Control · Model Authorization & Integrity
Verify model signatures before use
Verify that model cryptographic signatures are verified at deployment admission and on load.
OWASP AISVS v1.01, requirement 3.1.3
In plain English
Check model signatures when a model is admitted to an environment and again when it is loaded, and refuse anything that does not verify.
What good looks like
- Deployment admission rejects unsigned or wrongly signed artifacts.
- The serving runtime checks signatures at load time.
- Verification failures raise an alert.
How teams usually do it
- An admission controller or pipeline step that verifies signatures.
- A loader wrapper in the serving code that verifies before loading.
Evidence an auditor would accept
- Admission policy configuration.
- A test showing a tampered artifact is rejected.
Common mistakes
- Verifying in the pipeline but not at load time, so a file swapped on disk is still used.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.