| { |
| "tool": "modelaudit", |
| "tool_version": "0.2.40", |
| "scanned_at": "2026-04-26T23:54:25Z", |
| "files": { |
| "model.onnx": { |
| "size_mb": 1756.9, |
| "sha256": "741d548cc1e6480c9db1015f42b5952037a9b6447b87d1f7c8440a5afc644aef" |
| } |
| }, |
| "audit": { |
| "bytes_scanned": 1765579511, |
| "issues": [ |
| { |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 153, |
| "analyzed_initializers": 152, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "timestamp": 1777247654.9942844, |
| "type": "onnx_check", |
| "rule_code": "S902" |
| }, |
| { |
| "message": "Layer 'onnx::MatMul_14812' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "layer": "onnx::MatMul_14812", |
| "affected_neurons": [ |
| 0 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.081382155418396, |
| "max_weight": 0.08386771380901337, |
| "total_outputs": 1, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777247660.1666174, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| } |
| ], |
| "checks": [ |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-large/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/README.md" |
| }, |
| "timestamp": 1777246661.158137 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-large/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/README.md" |
| }, |
| "timestamp": 1777246661.158167 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-large/README.md", |
| "details": {}, |
| "timestamp": 1777246661.1581953 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/model.onnx" |
| }, |
| "timestamp": 1777246661.1878517 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/model.onnx" |
| }, |
| "timestamp": 1777246661.1878817 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": {}, |
| "timestamp": 1777246661.187907 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "md5": "5c967bdd53ca317c56c4db16260d52fb", |
| "sha256": "741d548cc1e6480c9db1015f42b5952037a9b6447b87d1f7c8440a5afc644aef", |
| "sha512": "3d9aa9bdf7197b4f1155c8ff8c0a6978ce095ff790f13fad0b85f27d9b6932ea70b5445d22dea60b25d721894dcf813d87010239e2ab28b9ae9a16738f2b2873", |
| "file_size": 1756917153 |
| }, |
| "timestamp": 1777246670.175186 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": {}, |
| "timestamp": 1777247650.1742697 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": {}, |
| "timestamp": 1777247650.1744556 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "passed", |
| "message": "All operators use standard ONNX domains", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "safe_nodes": 9746 |
| }, |
| "timestamp": 1777247650.2204537 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "nodes_checked": 9746 |
| }, |
| "timestamp": 1777247650.220493 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx (tensor: model.text_projector.linear_1.weight)", |
| "details": { |
| "component_count": 404 |
| }, |
| "timestamp": 1777247653.3490608 |
| }, |
| { |
| "name": "Weight Distribution Analysis Coverage", |
| "status": "failed", |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 153, |
| "analyzed_initializers": 152, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "rule_code": "S902", |
| "timestamp": 1777247654.9941475 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Layer 'onnx::MatMul_14812' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "details": { |
| "layer": "onnx::MatMul_14812", |
| "affected_neurons": [ |
| 0 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.081382155418396, |
| "max_weight": 0.08386771380901337, |
| "total_outputs": 1, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "rule_code": "S802", |
| "timestamp": 1777247660.166583 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/class-large/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/tokenizer.json" |
| }, |
| "timestamp": 1777247663.3793492 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/class-large/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/class-large/tokenizer.json" |
| }, |
| "timestamp": 1777247663.379393 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/class-large/tokenizer.json", |
| "details": {}, |
| "timestamp": 1777247663.379438 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/class-large/tokenizer.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777247663.7977839 |
| } |
| ], |
| "files_scanned": 4, |
| "assets": [ |
| { |
| "path": "/opt/sas/model-gli-text/models/class-large/LICENSE", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-large/README.md", |
| "type": "metadata", |
| "size": 1501 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-large/model.onnx", |
| "type": "onnx", |
| "size": 1756917153 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/class-large/tokenizer.json", |
| "type": "jinja2_template", |
| "size": 8649499 |
| } |
| ], |
| "has_errors": false, |
| "scanner_names": [ |
| "metadata", |
| "onnx", |
| "jinja2_template" |
| ], |
| "file_metadata": { |
| "/opt/sas/model-gli-text/models/class-large/LICENSE": { |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-large/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246661.1535344, |
| "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" |
| }, |
| "/opt/sas/model-gli-text/models/class-large/README.md": { |
| "file_size": 1501, |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-large/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777246661.1633294, |
| "content_hash": "021a1d138e0a5cf7bf3a4f2dbc3a046237fbdb0a8d3224d616802c7e52541d4f" |
| }, |
| "/opt/sas/model-gli-text/models/class-large/model.onnx": { |
| "file_size": 1756917153, |
| "file_hashes": { |
| "md5": "5c967bdd53ca317c56c4db16260d52fb", |
| "sha256": "741d548cc1e6480c9db1015f42b5952037a9b6447b87d1f7c8440a5afc644aef", |
| "sha512": "3d9aa9bdf7197b4f1155c8ff8c0a6978ce095ff790f13fad0b85f27d9b6932ea70b5445d22dea60b25d721894dcf813d87010239e2ab28b9ae9a16738f2b2873" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-large/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777247661.2712467, |
| "ir_version": 7, |
| "producer_name": "pytorch", |
| "node_count": 9746, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "onnx_weight_distribution_analysis_incomplete" |
| ], |
| "layers_analyzed": 152, |
| "anomalies_found": 1, |
| "content_hash": "741d548cc1e6480c9db1015f42b5952037a9b6447b87d1f7c8440a5afc644aef" |
| }, |
| "/opt/sas/model-gli-text/models/class-large/tokenizer.json": { |
| "file_size": 8649499, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/class-large/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777247663.8019288, |
| "content_hash": "9db2e87fbab9819100edd8d6dc7a54f82167045d04bfb752039dae4efb9cd85c" |
| } |
| }, |
| "content_hash": "bdf235c85537cb3dfb7fa08660385cdb79e29cf251d197c8cea2d4bcb3482f3c", |
| "start_time": 1777246658.7745924, |
| "duration": 1005.035670042038, |
| "total_checks": 16, |
| "passed_checks": 16, |
| "failed_checks": 0, |
| "success": false |
| } |
| } |
