How to meet it
OWASP AISVS v1.01
Model Lifecycle Management & Change Control · Controlled Deployment & Rollback
Roll back the whole model state
Verify that rollback capabilities restore the complete model state.
OWASP AISVS v1.01, requirement 3.3.2
In plain English
A rollback should restore everything that makes up the model's behaviour, including weights, prompts, configuration, adapters and guardrail settings.
What good looks like
- Everything that affects model behaviour is versioned together.
- Rollback restores the full set to a known good state.
- Rollback is tested.
How teams usually do it
- A release bundle per model version, listing every component and its version.
- Infrastructure as code for serving configuration.
Evidence an auditor would accept
- The release bundle definition.
- Results from a rollback test.
Common mistakes
- Rolling back weights but leaving a new system prompt or filter configuration in place.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.