How to meet it
OWASP AISVS v1.01
Supply Chain Security for Models · Model Artifact Integrity
Download models only from approved sources
Verify that model weights, datasets, and fine-tuning adapters are downloaded only from approved sources.
OWASP AISVS v1.01, requirement 6.1.2
In plain English
Download weights, datasets and adapters only from sources you have approved, and block the rest.
What good looks like
- There is a written list of approved sources and publishers.
- Downloads from elsewhere are blocked or need an exception.
- Internal mirrors are used for production.
How teams usually do it
- An internal model and dataset proxy that allows listed sources only.
- Network egress rules for training and serving environments.
Evidence an auditor would accept
- The approved source list and proxy configuration.
Common mistakes
- Approving a hosting site as a whole, when anyone can upload to it.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.