Model / Package Supply Chain

You download a model or package from a public hub and run it

Architecture introduced 05 Jan 2020

AI apps are built from models and packages downloaded from public hubs. Convenient — but you're running weights and code a stranger uploaded. If it's poisoned or booby-trapped, the danger arrives the moment you load it.

InstructionsDataActionsControl / decisionFeedback / logs

👆 Click any component in the diagram to inspect its risks & defenses

Follow a request · step 1 of 3

← / → keys

Someone uploads a model or package to a public hub. Anyone can.

Next: Training-Data Pipeline →