How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · AI Workload Sandboxing & Validation
Attest the environment before loading a model
Verify that workload attestation is performed before model loading to provide proof that the execution environment has not been tampered with.
OWASP AISVS v1.01, requirement 4.1.3
In plain English
Before loading a model, get proof that the machine it runs on has not been tampered with.
What good looks like
- The environment produces an attestation report before model loading.
- Keys or model files are released only after the report checks out.
- Failed attestation stops the workload.
How teams usually do it
- Confidential computing services that provide attestation, with a key service that checks it.
Evidence an auditor would accept
- Attestation policy and logs of successful checks.
Common mistakes
- Collecting attestation reports but releasing keys whether or not they pass.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.