docs(provenance): attest model source of record

#2
Files changed (1) hide show
  1. MODEL_PROVENANCE.json +44 -0
MODEL_PROVENANCE.json ADDED
@@ -0,0 +1,44 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "schema": "szl.model-source-attestation/v1",
3
+ "observed_at": "2026-07-12T00:27:14Z",
4
+ "model": {
5
+ "id": "SZLHOLDINGS/szl-kernels",
6
+ "repository_type": "model",
7
+ "artifact_kind": "kernel-code-and-configuration",
8
+ "trained_weights_present": false
9
+ },
10
+ "source_of_record": {
11
+ "state": "VERIFIED_HF_SOURCE_OF_RECORD",
12
+ "platform": "huggingface",
13
+ "repository": "SZLHOLDINGS/szl-kernels",
14
+ "artifact_base_revision": "dab03c8bfffd0e771e1e4e03b1c16fb2e71dd147",
15
+ "artifact_base_state": "MEASURED_PRE_ATTESTATION_BASE",
16
+ "artifact_base_url": "https://huggingface.co/SZLHOLDINGS/szl-kernels/tree/dab03c8bfffd0e771e1e4e03b1c16fb2e71dd147",
17
+ "file_count": 10,
18
+ "tree_sha256": "d40080d89d5f4ad6fc5f4024d4f614d1578ac9a2e8a600e80cf5de9fed055d8f",
19
+ "tree_hash_algorithm": "sha256 of UTF-8 path + NUL + per-file sha256 + LF, sorted by path; .cache excluded"
20
+ },
21
+ "public_github": {
22
+ "state": "NO_DIRECT_PUBLIC_IMPLEMENTATION_OBSERVED",
23
+ "same_name_candidate": "https://github.com/szl-holdings/szl-kernels",
24
+ "same_name_candidate_http_status": 404,
25
+ "card_references": [
26
+ "https://github.com/szl-holdings/lutar-lean",
27
+ "https://github.com/szl-holdings/governed-receipt-spec",
28
+ "https://github.com/szl-holdings/szl-papers/blob/main/PAPERS_INDEX.md"
29
+ ],
30
+ "card_reference_role": "FORMALIZATION_SPECIFICATION_OR_RESEARCH_CONTEXT_NOT_BUILD_SOURCE"
31
+ },
32
+ "claims": {
33
+ "github_repository_parity": "NOT_CLAIMED",
34
+ "reproducible_build": "NOT_CLAIMED",
35
+ "trained_model": "NOT_CLAIMED",
36
+ "serving_process_revision": "NOT_APPLICABLE_REPOSITORY_ARTIFACT"
37
+ },
38
+ "limits": [
39
+ "The 404 observation establishes only that no public same-name repository was reachable at the observation time; it does not make a claim about private repositories.",
40
+ "The formalization and receipt-spec repositories are supporting evidence, not asserted build sources for this artifact.",
41
+ "The attestation overlay cannot self-embed its resulting Hub commit, so the immutable artifact_base_revision is the measured pre-overlay base.",
42
+ "No .bin, .safetensors, .pt, .pth, .onnx, or .gguf weight artifact was present in the measured base tree."
43
+ ]
44
+ }