| { |
| "tool": "modelaudit", |
| "tool_version": "0.2.40", |
| "scanned_at": "2026-04-27T03:03:46Z", |
| "files": { |
| "model.onnx": { |
| "size_mb": 664.8, |
| "sha256": "9cc27f025c07c3187441e83c1fea7f5b3745d4201c32f6c4e1f9dbd901a15b9b" |
| }, |
| "model_fp16.onnx": { |
| "size_mb": 333.0, |
| "sha256": "9e14220fb41ebe6c21f8b79d5d9f20195576e527e9121eb3cf241f75c55c5b38" |
| }, |
| "model_int8.onnx": { |
| "size_mb": 196.8, |
| "sha256": "791f20d6f34d4a4d1e2ed19038b08892f0489353df4b8101429b8bc0acda389f" |
| } |
| }, |
| "audit": { |
| "bytes_scanned": 1205695543, |
| "issues": [ |
| { |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "timestamp": 1777258482.9122362, |
| "type": "onnx_check", |
| "rule_code": "S902" |
| }, |
| { |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703059732913971, |
| "max_weight": 0.07393145561218262, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777258485.3761518, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| }, |
| { |
| "message": "File does not contain expected XGBoost binary model markers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "expected_patterns": [ |
| "binf", |
| "gbtree", |
| "gblinear", |
| "dart", |
| "reg:", |
| "binary:", |
| "multi:" |
| ] |
| }, |
| "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", |
| "timestamp": 1777258486.0104115, |
| "type": "xgboost_check" |
| }, |
| { |
| "message": "Model references custom operator domain 'com.microsoft'. This is metadata only - ensure operators are from trusted sources before installation.", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx (node: /rnn/lstm/LSTM_quant)", |
| "details": { |
| "op_type": "DynamicQuantizeLSTM", |
| "domain": "com.microsoft", |
| "security_note": "Custom domains indicate dependencies on external operator implementations. ONNX files cannot execute code - risk is in runtime environment if malicious operators are installed. Verify operator packages before installation." |
| }, |
| "timestamp": 1777258591.9460073, |
| "type": "onnx_check", |
| "rule_code": "S302" |
| }, |
| { |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703059732913971, |
| "max_weight": 0.07393145561218262, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777258601.9431055, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| }, |
| { |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "timestamp": 1777258788.2076142, |
| "type": "onnx_check", |
| "rule_code": "S902" |
| }, |
| { |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703125, |
| "max_weight": 0.07391357421875, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777259024.5859768, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| } |
| ], |
| "checks": [ |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/README.md" |
| }, |
| "timestamp": 1777258109.316769 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/README.md" |
| }, |
| "timestamp": 1777258109.316799 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/README.md", |
| "details": {}, |
| "timestamp": 1777258109.3168325 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/gliner_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/gliner_config.json" |
| }, |
| "timestamp": 1777258109.4005878 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/gliner_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/gliner_config.json" |
| }, |
| "timestamp": 1777258109.4006138 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/gliner_config.json", |
| "details": {}, |
| "timestamp": 1777258109.4006395 |
| }, |
| { |
| "name": "Model Name Policy Check", |
| "status": "passed", |
| "message": "Model Name Policy Check completed successfully", |
| "location": "/opt/sas/model-gli-text/models/small/gliner_config.json", |
| "details": { |
| "component_count": 2 |
| }, |
| "timestamp": 1777258109.401454 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model.onnx" |
| }, |
| "timestamp": 1777258109.4279778 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model.onnx" |
| }, |
| "timestamp": 1777258109.4280038 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": {}, |
| "timestamp": 1777258109.4280286 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "md5": "341dcb189771771a8bd45e729f9faae1", |
| "sha256": "9cc27f025c07c3187441e83c1fea7f5b3745d4201c32f6c4e1f9dbd901a15b9b", |
| "sha512": "b25f84ef7cc490ce13bb112360df67b7d3324f009f62699e96a0d994a1ea403d8899b3fc1d0e584724fde7d82cc2f4fb62248d12fcc121ad2141b7135ab7e8ad", |
| "file_size": 664785948 |
| }, |
| "timestamp": 1777258112.8685162 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": {}, |
| "timestamp": 1777258481.3060076 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": {}, |
| "timestamp": 1777258481.3061643 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "passed", |
| "message": "All operators use standard ONNX domains", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "safe_nodes": 2834 |
| }, |
| "timestamp": 1777258481.319853 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "nodes_checked": 2834 |
| }, |
| "timestamp": 1777258481.3198905 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx (tensor: token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", |
| "details": { |
| "component_count": 121 |
| }, |
| "timestamp": 1777258482.7126448 |
| }, |
| { |
| "name": "Weight Distribution Analysis Coverage", |
| "status": "failed", |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "rule_code": "S902", |
| "timestamp": 1777258482.9120884 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703059732913971, |
| "max_weight": 0.07393145561218262, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "rule_code": "S802", |
| "timestamp": 1777258485.376121 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/spm.model" |
| }, |
| "timestamp": 1777258485.9799619 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/spm.model" |
| }, |
| "timestamp": 1777258485.9799898 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": {}, |
| "timestamp": 1777258485.9800174 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "md5": "1613fcbf3b82999c187b09c9db79b568", |
| "sha256": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd", |
| "sha512": "950cf1b397c25342053efaea576419e104f11e085796d741e5e78d6765ffe5474f4f096ee578099b04a611bde03e12808c51e2b6e89d2962a8665a35da6eb081", |
| "file_size": 2464616 |
| }, |
| "timestamp": 1777258486.0001051 |
| }, |
| { |
| "name": "Binary Structure Validation", |
| "status": "failed", |
| "message": "File does not contain expected XGBoost binary model markers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "expected_patterns": [ |
| "binf", |
| "gbtree", |
| "gblinear", |
| "dart", |
| "reg:", |
| "binary:", |
| "multi:" |
| ] |
| }, |
| "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", |
| "timestamp": 1777258486.0103905 |
| }, |
| { |
| "name": "XGBoost Loading", |
| "status": "passed", |
| "message": "XGBoost loading disabled (safe mode)", |
| "location": "/opt/sas/model-gli-text/models/small/spm.model", |
| "details": { |
| "safe_mode": true |
| }, |
| "timestamp": 1777258486.0106413 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer.json" |
| }, |
| "timestamp": 1777258488.1123 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer.json" |
| }, |
| "timestamp": 1777258488.1123343 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer.json", |
| "details": {}, |
| "timestamp": 1777258488.1123703 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777258488.5244691 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer_config.json" |
| }, |
| "timestamp": 1777258488.5337946 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer_config.json" |
| }, |
| "timestamp": 1777258488.5338225 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer_config.json", |
| "details": {}, |
| "timestamp": 1777258488.5338516 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/small/tokenizer_config.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777258488.5343366 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model_int8.onnx" |
| }, |
| "timestamp": 1777258488.5541632 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model_int8.onnx" |
| }, |
| "timestamp": 1777258488.5541933 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": {}, |
| "timestamp": 1777258488.554221 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "md5": "f77f13b67aaef2e11cd1daab6e50158b", |
| "sha256": "791f20d6f34d4a4d1e2ed19038b08892f0489353df4b8101429b8bc0acda389f", |
| "sha512": "f26e912e06d71706360a208f93c2c280576e7b4920aabf9af0f368c68c15b48f669731396bb26d5f544f5da177a7ab76c13ea14d41442c02d41aeb809809b7fe", |
| "file_size": 196786576 |
| }, |
| "timestamp": 1777258489.7909365 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": {}, |
| "timestamp": 1777258591.9320846 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": {}, |
| "timestamp": 1777258591.9322507 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "failed", |
| "message": "Model references custom operator domain 'com.microsoft'. This is metadata only - ensure operators are from trusted sources before installation.", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx (node: /rnn/lstm/LSTM_quant)", |
| "details": { |
| "op_type": "DynamicQuantizeLSTM", |
| "domain": "com.microsoft", |
| "security_note": "Custom domains indicate dependencies on external operator implementations. ONNX files cannot execute code - risk is in runtime environment if malicious operators are installed. Verify operator packages before installation." |
| }, |
| "rule_code": "S302", |
| "timestamp": 1777258591.945883 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "nodes_checked": 2998 |
| }, |
| "timestamp": 1777258591.947299 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx (tensor: token_rep_layer.bert_layer.model.embeddings.LayerNorm.weight)", |
| "details": { |
| "component_count": 133 |
| }, |
| "timestamp": 1777258592.3424485 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703059732913971, |
| "max_weight": 0.07393145561218262, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "rule_code": "S802", |
| "timestamp": 1777258601.9430761 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model_fp16.onnx" |
| }, |
| "timestamp": 1777258602.036379 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/small/model_fp16.onnx" |
| }, |
| "timestamp": 1777258602.036411 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": {}, |
| "timestamp": 1777258602.036439 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "md5": "2e8fc6c9046accdfc6db4e2e8b30446d", |
| "sha256": "9e14220fb41ebe6c21f8b79d5d9f20195576e527e9121eb3cf241f75c55c5b38", |
| "sha512": "3f1a9ed81514a17ad18f5f821b3ae2fa6604265f0ee0bab340160b2034b7d4554d4f92c1c00ae8736166f1d582ae56a8a30777c302146d806e2b44e88afcc3f4", |
| "file_size": 332992758 |
| }, |
| "timestamp": 1777258604.079951 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": {}, |
| "timestamp": 1777258787.4075968 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": {}, |
| "timestamp": 1777258787.4077845 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "passed", |
| "message": "All operators use standard ONNX domains", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "safe_nodes": 2837 |
| }, |
| "timestamp": 1777258787.42129 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "nodes_checked": 2837 |
| }, |
| "timestamp": 1777258787.4213207 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx (tensor: token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", |
| "details": { |
| "component_count": 121 |
| }, |
| "timestamp": 1777258788.11124 |
| }, |
| { |
| "name": "Weight Distribution Analysis Coverage", |
| "status": "failed", |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "rule_code": "S902", |
| "timestamp": 1777258788.207482 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Layer 'onnx::LSTM_4334' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4334", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.0703125, |
| "max_weight": 0.07391357421875, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "rule_code": "S802", |
| "timestamp": 1777259024.585856 |
| } |
| ], |
| "files_scanned": 11, |
| "assets": [ |
| { |
| "path": "/opt/sas/model-gli-text/models/small/LICENSE", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/README.md", |
| "type": "metadata", |
| "size": 1682 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/added_tokens.json", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/gliner_config.json", |
| "type": "manifest", |
| "size": 676, |
| "keys": [ |
| "class_token_index", |
| "dropout", |
| "encoder_config", |
| "ent_token", |
| "fine_tune", |
| "has_rnn", |
| "hidden_size", |
| "label_smoothing", |
| "loss_alpha", |
| "loss_gamma", |
| "loss_reduction", |
| "max_len", |
| "max_neg_type_ratio", |
| "max_types", |
| "max_width", |
| "model_name", |
| "model_type", |
| "name", |
| "random_drop", |
| "sep_token", |
| "shuffle_types", |
| "span_mode", |
| "subtoken_pooling", |
| "transformers_version", |
| "vocab_size", |
| "words_splitter_type" |
| ] |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/model.onnx", |
| "type": "onnx", |
| "size": 664785948 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/special_tokens_map.json", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/spm.model", |
| "type": "xgboost", |
| "size": 2464616 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer.json", |
| "type": "jinja2_template", |
| "size": 8649232 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/tokenizer_config.json", |
| "type": "jinja2_template", |
| "size": 1662 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/model_int8.onnx", |
| "type": "onnx", |
| "size": 196786576 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/small/model_fp16.onnx", |
| "type": "onnx", |
| "size": 332992758 |
| } |
| ], |
| "has_errors": false, |
| "scanner_names": [ |
| "metadata", |
| "manifest", |
| "onnx", |
| "xgboost", |
| "jinja2_template" |
| ], |
| "file_metadata": { |
| "/opt/sas/model-gli-text/models/small/LICENSE": { |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258109.311206, |
| "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" |
| }, |
| "/opt/sas/model-gli-text/models/small/README.md": { |
| "file_size": 1682, |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258109.3220754, |
| "content_hash": "9ee4ab849068cdb1fd1ddc590f5e792724c0226f0dfe95397c3bbbba932749b4" |
| }, |
| "/opt/sas/model-gli-text/models/small/added_tokens.json": { |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258109.3960083, |
| "content_hash": "c358eb74586ab438484d8acf4534f67283b33041bc5ffee6b20a4a075cdc3cd6" |
| }, |
| "/opt/sas/model-gli-text/models/small/gliner_config.json": { |
| "file_size": 676, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258109.403521, |
| "root_type": "dict", |
| "keys": [ |
| "class_token_index", |
| "dropout", |
| "encoder_config", |
| "ent_token", |
| "fine_tune", |
| "has_rnn", |
| "hidden_size", |
| "label_smoothing", |
| "loss_alpha", |
| "loss_gamma", |
| "loss_reduction", |
| "max_len", |
| "max_neg_type_ratio", |
| "max_types", |
| "max_width", |
| "model_name", |
| "model_type", |
| "name", |
| "random_drop", |
| "sep_token", |
| "shuffle_types", |
| "span_mode", |
| "subtoken_pooling", |
| "transformers_version", |
| "vocab_size", |
| "words_splitter_type" |
| ], |
| "content_hash": "821642f53f79db1a39f6ba2bec1a0066aa5e7e0d75730aa16a76d82ce30cb288" |
| }, |
| "/opt/sas/model-gli-text/models/small/model.onnx": { |
| "file_size": 664785948, |
| "file_hashes": { |
| "md5": "341dcb189771771a8bd45e729f9faae1", |
| "sha256": "9cc27f025c07c3187441e83c1fea7f5b3745d4201c32f6c4e1f9dbd901a15b9b", |
| "sha512": "b25f84ef7cc490ce13bb112360df67b7d3324f009f62699e96a0d994a1ea403d8899b3fc1d0e584724fde7d82cc2f4fb62248d12fcc121ad2141b7135ab7e8ad" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258485.962976, |
| "ir_version": 7, |
| "producer_name": "pytorch", |
| "node_count": 2834, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "onnx_weight_distribution_analysis_incomplete" |
| ], |
| "layers_analyzed": 48, |
| "anomalies_found": 1, |
| "content_hash": "9cc27f025c07c3187441e83c1fea7f5b3745d4201c32f6c4e1f9dbd901a15b9b" |
| }, |
| "/opt/sas/model-gli-text/models/small/special_tokens_map.json": { |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258485.9705782, |
| "content_hash": "b2f1b2f15f29a6b6d9d6ea4eca1675d2c231a71477f151d48f79cc83a625ba21" |
| }, |
| "/opt/sas/model-gli-text/models/small/spm.model": { |
| "file_size": 2464616, |
| "file_hashes": { |
| "md5": "1613fcbf3b82999c187b09c9db79b568", |
| "sha256": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd", |
| "sha512": "950cf1b397c25342053efaea576419e104f11e085796d741e5e78d6765ffe5474f4f096ee578099b04a611bde03e12808c51e2b6e89d2962a8665a35da6eb081" |
| }, |
| "license_info": [ |
| { |
| "spdx_id": "RAIL", |
| "name": "Responsible AI License", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258486.0491254, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "xgboost_binary_structure_unrecognized" |
| ], |
| "analysis_incomplete": true, |
| "content_hash": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd" |
| }, |
| "/opt/sas/model-gli-text/models/small/tokenizer.json": { |
| "file_size": 8649232, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258488.5284793, |
| "content_hash": "91cf35efa9ec3549c6c52a415cdd7531fd172858d7d9eecef720bc4a3f1f8699" |
| }, |
| "/opt/sas/model-gli-text/models/small/tokenizer_config.json": { |
| "file_size": 1662, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258488.5357106, |
| "content_hash": "2aea6a53fc15dfb714fe2628fa1b5dc9ed780a8d1a30d1b652302d898941c9af" |
| }, |
| "/opt/sas/model-gli-text/models/small/model_int8.onnx": { |
| "file_size": 196786576, |
| "file_hashes": { |
| "md5": "f77f13b67aaef2e11cd1daab6e50158b", |
| "sha256": "791f20d6f34d4a4d1e2ed19038b08892f0489353df4b8101429b8bc0acda389f", |
| "sha512": "f26e912e06d71706360a208f93c2c280576e7b4920aabf9af0f368c68c15b48f669731396bb26d5f544f5da177a7ab76c13ea14d41442c02d41aeb809809b7fe" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777258602.01491, |
| "ir_version": 7, |
| "producer_name": "onnx.quantize", |
| "node_count": 2998, |
| "custom_domains": [ |
| "com.microsoft" |
| ], |
| "layers_analyzed": 61, |
| "anomalies_found": 1, |
| "content_hash": "791f20d6f34d4a4d1e2ed19038b08892f0489353df4b8101429b8bc0acda389f" |
| }, |
| "/opt/sas/model-gli-text/models/small/model_fp16.onnx": { |
| "file_size": 332992758, |
| "file_hashes": { |
| "md5": "2e8fc6c9046accdfc6db4e2e8b30446d", |
| "sha256": "9e14220fb41ebe6c21f8b79d5d9f20195576e527e9121eb3cf241f75c55c5b38", |
| "sha512": "3f1a9ed81514a17ad18f5f821b3ae2fa6604265f0ee0bab340160b2034b7d4554d4f92c1c00ae8736166f1d582ae56a8a30777c302146d806e2b44e88afcc3f4" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/small/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777259024.8991926, |
| "ir_version": 7, |
| "producer_name": "pytorch", |
| "node_count": 2837, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "onnx_weight_distribution_analysis_incomplete" |
| ], |
| "layers_analyzed": 48, |
| "anomalies_found": 1, |
| "content_hash": "9e14220fb41ebe6c21f8b79d5d9f20195576e527e9121eb3cf241f75c55c5b38" |
| } |
| }, |
| "content_hash": "44f65ed76b5ce71cbd56f62710e15535a4f27bcad4bf2d96a5842621228a84e6", |
| "start_time": 1777258107.585793, |
| "duration": 917.3306574821472, |
| "total_checks": 46, |
| "passed_checks": 46, |
| "failed_checks": 0, |
| "success": false |
| } |
| } |
