How to meet it
OWASP AISVS v1.01
Supply Chain Security for Models · Model Artifact Integrity
Verify third-party model files
Verify that every third-party model artifact can be integrity-verified.
OWASP AISVS v1.01, requirement 6.1.3
In plain English
For every third-party model artifact, you should be able to check it is exactly what the publisher released.
What good looks like
- Hashes or signatures from the publisher are checked on download.
- Where the publisher provides none, you record your own hash at approval and check against it.
- Checks run again before deployment.
How teams usually do it
- Verifying publisher signatures or checksums in the import step.
- Pinning artifacts by hash in configuration.
Evidence an auditor would accept
- Recorded hashes and verification logs.
Common mistakes
- Pinning a model by name and tag, which the publisher can change.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.