| { |
| "tool": "modelaudit", |
| "tool_version": "0.2.40", |
| "scanned_at": "2026-04-26T23:36:13Z", |
| "files": { |
| "model.onnx": { |
| "size_mb": 747.3, |
| "sha256": "1395fde4ae8de8e41f51080c18a09c48c704b5a1dd34d78950b6c9a11efddd7b" |
| } |
| }, |
| "audit": { |
| "bytes_scanned": 755978390, |
| "issues": [ |
| { |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 81, |
| "analyzed_initializers": 80, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "timestamp": 1777246566.0244322, |
| "type": "onnx_check", |
| "rule_code": "S902" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 7 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 7, |
| "max_similarity_to_others": 0.6381392478942871, |
| "weight_norm": 5.269960403442383, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2680535, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 48 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 48, |
| "max_similarity_to_others": 0.6809431314468384, |
| "weight_norm": 0.4544937014579773, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2688065, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 117 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 117, |
| "max_similarity_to_others": 0.6338923573493958, |
| "weight_norm": 0.3973894417285919, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.269298, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 213 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 213, |
| "max_similarity_to_others": 0.6949571967124939, |
| "weight_norm": 0.506813645362854, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2697954, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 248 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 248, |
| "max_similarity_to_others": 0.6100180149078369, |
| "weight_norm": 0.463756263256073, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2702582, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 266 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 266, |
| "max_similarity_to_others": 0.6396561861038208, |
| "weight_norm": 0.6704791188240051, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2707276, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 272 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 272, |
| "max_similarity_to_others": 0.6659662127494812, |
| "weight_norm": 0.4908224046230316, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2711768, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 296 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 296, |
| "max_similarity_to_others": 0.6932873725891113, |
| "weight_norm": 0.5208156108856201, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2716446, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 329 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 329, |
| "max_similarity_to_others": 0.6774165630340576, |
| "weight_norm": 0.6914364695549011, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2720995, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 344 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 344, |
| "max_similarity_to_others": 0.5927300453186035, |
| "weight_norm": 1.2662328481674194, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2725427, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 357 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 357, |
| "max_similarity_to_others": 0.6659072637557983, |
| "weight_norm": 0.5361911058425903, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2729821, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 378 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 378, |
| "max_similarity_to_others": 0.5825252532958984, |
| "weight_norm": 0.5307279229164124, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2734282, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 426 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 426, |
| "max_similarity_to_others": 0.6620266437530518, |
| "weight_norm": 0.4639527499675751, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2738674, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 438 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 438, |
| "max_similarity_to_others": 0.6185715198516846, |
| "weight_norm": 0.4315977692604065, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2743013, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 455 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 455, |
| "max_similarity_to_others": 0.6825492978096008, |
| "weight_norm": 0.49168309569358826, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2747452, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 481 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 481, |
| "max_similarity_to_others": 0.6377342939376831, |
| "weight_norm": 0.5780144929885864, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.275177, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 487 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 487, |
| "max_similarity_to_others": 0.6877197027206421, |
| "weight_norm": 0.4727543592453003, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2756114, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 544 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 544, |
| "max_similarity_to_others": 0.6736364960670471, |
| "weight_norm": 0.5731831789016724, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.276052, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 719 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 719, |
| "max_similarity_to_others": 0.6995067596435547, |
| "weight_norm": 0.7687365412712097, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2764947, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 729 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 729, |
| "max_similarity_to_others": 0.6775385141372681, |
| "weight_norm": 0.671414852142334, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.2769313, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'model.encoder_model.encoder.rel_embeddings.weight' output neuron 739 has unusually dissimilar weights", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 739, |
| "max_similarity_to_others": 0.6622445583343506, |
| "weight_norm": 0.7887903451919556, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.277361, |
| "type": "onnx_check", |
| "rule_code": "S803" |
| }, |
| { |
| "message": "Layer 'onnx::MatMul_7564' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "layer": "onnx::MatMul_7564", |
| "affected_neurons": [ |
| 0 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.07994189858436584, |
| "max_weight": 0.08539700508117676, |
| "total_outputs": 1, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777246569.277694, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| } |
| ], |
| "checks": [ |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-base/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/README.md" |
| }, |
| "timestamp": 1777246145.7504194 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-base/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/README.md" |
| }, |
| "timestamp": 1777246145.7504556 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-base/README.md", |
| "details": {}, |
| "timestamp": 1777246145.7504857 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/model.onnx" |
| }, |
| "timestamp": 1777246145.7792284 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/model.onnx" |
| }, |
| "timestamp": 1777246145.7792575 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": {}, |
| "timestamp": 1777246145.7792835 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "md5": "2fc83f11410952695f7c8727fd06e2e1", |
| "sha256": "1395fde4ae8de8e41f51080c18a09c48c704b5a1dd34d78950b6c9a11efddd7b", |
| "sha512": "5fd060dc11e09a6c1b1ff78e4ecd5a735db57778ee2a2aa9bfae42a9b51dd8bb06ec80a2efe03eb4490d666feb554cdf0e8d71235d1df340aacf7a13037193ff", |
| "file_size": 747316021 |
| }, |
| "timestamp": 1777246149.5428913 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": {}, |
| "timestamp": 1777246564.1411436 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": {}, |
| "timestamp": 1777246564.1413274 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "passed", |
| "message": "All operators use standard ONNX domains", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "safe_nodes": 5006 |
| }, |
| "timestamp": 1777246564.1654427 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "nodes_checked": 5006 |
| }, |
| "timestamp": 1777246564.165477 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx (tensor: model.text_projector.linear_1.weight)", |
| "details": { |
| "component_count": 212 |
| }, |
| "timestamp": 1777246565.7565227 |
| }, |
| { |
| "name": "Weight Distribution Analysis Coverage", |
| "status": "failed", |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 81, |
| "analyzed_initializers": 80, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "rule_code": "S902", |
| "timestamp": 1777246566.0242755 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Weight Distribution Anomaly Detection found 22 issues", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "details": { |
| "component_count": 22, |
| "findings": [ |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 7, |
| "max_similarity_to_others": 0.6381392478942871, |
| "weight_norm": 5.269960403442383, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 48, |
| "max_similarity_to_others": 0.6809431314468384, |
| "weight_norm": 0.4544937014579773, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 117, |
| "max_similarity_to_others": 0.6338923573493958, |
| "weight_norm": 0.3973894417285919, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 213, |
| "max_similarity_to_others": 0.6949571967124939, |
| "weight_norm": 0.506813645362854, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 248, |
| "max_similarity_to_others": 0.6100180149078369, |
| "weight_norm": 0.463756263256073, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 266, |
| "max_similarity_to_others": 0.6396561861038208, |
| "weight_norm": 0.6704791188240051, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 272, |
| "max_similarity_to_others": 0.6659662127494812, |
| "weight_norm": 0.4908224046230316, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 296, |
| "max_similarity_to_others": 0.6932873725891113, |
| "weight_norm": 0.5208156108856201, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 329, |
| "max_similarity_to_others": 0.6774165630340576, |
| "weight_norm": 0.6914364695549011, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 344, |
| "max_similarity_to_others": 0.5927300453186035, |
| "weight_norm": 1.2662328481674194, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 357, |
| "max_similarity_to_others": 0.6659072637557983, |
| "weight_norm": 0.5361911058425903, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 378, |
| "max_similarity_to_others": 0.5825252532958984, |
| "weight_norm": 0.5307279229164124, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 426, |
| "max_similarity_to_others": 0.6620266437530518, |
| "weight_norm": 0.4639527499675751, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 438, |
| "max_similarity_to_others": 0.6185715198516846, |
| "weight_norm": 0.4315977692604065, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 455, |
| "max_similarity_to_others": 0.6825492978096008, |
| "weight_norm": 0.49168309569358826, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 481, |
| "max_similarity_to_others": 0.6377342939376831, |
| "weight_norm": 0.5780144929885864, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 487, |
| "max_similarity_to_others": 0.6877197027206421, |
| "weight_norm": 0.4727543592453003, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 544, |
| "max_similarity_to_others": 0.6736364960670471, |
| "weight_norm": 0.5731831789016724, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 719, |
| "max_similarity_to_others": 0.6995067596435547, |
| "weight_norm": 0.7687365412712097, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 729, |
| "max_similarity_to_others": 0.6775385141372681, |
| "weight_norm": 0.671414852142334, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "model.encoder_model.encoder.rel_embeddings.weight", |
| "neuron_index": 739, |
| "max_similarity_to_others": 0.6622445583343506, |
| "weight_norm": 0.7887903451919556, |
| "total_outputs": 768, |
| "analysis_method": "structural_analysis" |
| }, |
| { |
| "layer": "onnx::MatMul_7564", |
| "affected_neurons": [ |
| 0 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.07994189858436584, |
| "max_weight": 0.08539700508117676, |
| "total_outputs": 1, |
| "analysis_method": "structural_analysis" |
| } |
| ] |
| }, |
| "why": "Neurons with weight patterns completely unlike others in the same layer are uncommon in standard training. This dissimilarity (measured by cosine similarity below threshold) may indicate injected functionality or training irregularities.", |
| "timestamp": 1777246569.277689 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-base/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/tokenizer.json" |
| }, |
| "timestamp": 1777246572.0872605 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-base/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-base/tokenizer.json" |
| }, |
| "timestamp": 1777246572.0872974 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-base/tokenizer.json", |
| "details": {}, |
| "timestamp": 1777246572.0873308 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/class-base/tokenizer.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777246572.4952347 |
| } |
| ], |
| "files_scanned": 4, |
| "assets": [ |
| { |
| "path": "/opt/sas/model-gli-text/models/class-base/LICENSE", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-base/README.md", |
| "type": "metadata", |
| "size": 1512 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-base/model.onnx", |
| "type": "onnx", |
| "size": 747316021 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-base/tokenizer.json", |
| "type": "jinja2_template", |
| "size": 8649499 |
| } |
| ], |
| "has_errors": false, |
| "scanner_names": [ |
| "metadata", |
| "onnx", |
| "jinja2_template" |
| ], |
| "file_metadata": { |
| "/opt/sas/model-gli-text/models/class-base/LICENSE": { |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-base/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246145.7461073, |
| "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" |
| }, |
| "/opt/sas/model-gli-text/models/class-base/README.md": { |
| "file_size": 1512, |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-base/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246145.7555075, |
| "content_hash": "e50235d2d54088d2654ca2c297a5f2d245d95542a71ca1ad825bfed99aa3ed82" |
| }, |
| "/opt/sas/model-gli-text/models/class-base/model.onnx": { |
| "file_size": 747316021, |
| "file_hashes": { |
| "md5": "2fc83f11410952695f7c8727fd06e2e1", |
| "sha256": "1395fde4ae8de8e41f51080c18a09c48c704b5a1dd34d78950b6c9a11efddd7b", |
| "sha512": "5fd060dc11e09a6c1b1ff78e4ecd5a735db57778ee2a2aa9bfae42a9b51dd8bb06ec80a2efe03eb4490d666feb554cdf0e8d71235d1df340aacf7a13037193ff" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-base/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246569.9801016, |
| "ir_version": 7, |
| "producer_name": "pytorch", |
| "node_count": 5006, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "onnx_weight_distribution_analysis_incomplete" |
| ], |
| "layers_analyzed": 80, |
| "anomalies_found": 22, |
| "content_hash": "1395fde4ae8de8e41f51080c18a09c48c704b5a1dd34d78950b6c9a11efddd7b" |
| }, |
| "/opt/sas/model-gli-text/models/class-base/tokenizer.json": { |
| "file_size": 8649499, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-base/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246572.499578, |
| "content_hash": "9db2e87fbab9819100edd8d6dc7a54f82167045d04bfb752039dae4efb9cd85c" |
| } |
| }, |
| "content_hash": "57c5188ef1f8e400b71cbd01b578163bf0498727ecd7247bb26f372ad06e9a4b", |
| "start_time": 1777246144.7577603, |
| "duration": 427.7496910095215, |
| "total_checks": 16, |
| "passed_checks": 16, |
| "failed_checks": 0, |
| "success": false |
| } |
| } |
