| { |
| "tool": "modelaudit", |
| "tool_version": "0.2.40", |
| "scanned_at": "2026-04-27T01:31:40Z", |
| "files": { |
| "model.onnx": { |
| "size_mb": 664.8, |
| "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb" |
| } |
| }, |
| "audit": { |
| "bytes_scanned": 673129355, |
| "issues": [ |
| { |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "timestamp": 1777253494.588947, |
| "type": "onnx_check", |
| "rule_code": "S902" |
| }, |
| { |
| "message": "Layer 'onnx::LSTM_4158' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4158", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.07031653076410294, |
| "max_weight": 0.07356292009353638, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "timestamp": 1777253496.9685366, |
| "type": "onnx_check", |
| "rule_code": "S802" |
| } |
| ], |
| "checks": [ |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/README.md" |
| }, |
| "timestamp": 1777253121.9529808 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/README.md" |
| }, |
| "timestamp": 1777253121.9530113 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", |
| "details": {}, |
| "timestamp": 1777253121.9530468 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json" |
| }, |
| "timestamp": 1777253121.9889367 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json" |
| }, |
| "timestamp": 1777253121.9889696 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", |
| "details": {}, |
| "timestamp": 1777253121.9889998 |
| }, |
| { |
| "name": "Model Name Policy Check", |
| "status": "passed", |
| "message": "Model Name Policy Check completed successfully", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", |
| "details": { |
| "component_count": 2 |
| }, |
| "timestamp": 1777253121.990232 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx" |
| }, |
| "timestamp": 1777253122.0267172 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx" |
| }, |
| "timestamp": 1777253122.0267603 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": {}, |
| "timestamp": 1777253122.026787 |
| }, |
| { |
| "name": "File Integrity Hash", |
| "status": "passed", |
| "message": "File integrity hashes calculated", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "md5": "4e21d02cd05d9de8e79fc087a9bce991", |
| "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb", |
| "sha512": "331c56a8c538c67a332b15567d9630082117ad2b5e888bfb3d4aabf63626e6069c0f2f2f99b4806a52fba551f63380bad236d5070f338d104a47788674718d95", |
| "file_size": 664780382 |
| }, |
| "timestamp": 1777253125.408813 |
| }, |
| { |
| "name": "JIT/Script Code Execution Detection", |
| "status": "passed", |
| "message": "No JIT/Script code execution risks detected", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": {}, |
| "timestamp": 1777253492.9776785 |
| }, |
| { |
| "name": "Network Communication Detection", |
| "status": "passed", |
| "message": "No network communication patterns detected", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": {}, |
| "timestamp": 1777253492.977827 |
| }, |
| { |
| "name": "Custom Operator Domain Check", |
| "status": "passed", |
| "message": "All operators use standard ONNX domains", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "safe_nodes": 2661 |
| }, |
| "timestamp": 1777253492.9906225 |
| }, |
| { |
| "name": "Python Operator Detection", |
| "status": "passed", |
| "message": "No Python operators detected", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "nodes_checked": 2661 |
| }, |
| "timestamp": 1777253492.9906573 |
| }, |
| { |
| "name": "Tensor Size Validation", |
| "status": "passed", |
| "message": "Tensor Size Validation completed successfully", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx (tensor: core.token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", |
| "details": { |
| "component_count": 121 |
| }, |
| "timestamp": 1777253494.400935 |
| }, |
| { |
| "name": "Weight Distribution Analysis Coverage", |
| "status": "failed", |
| "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", |
| "coverage_gap": "partial_initializer_coverage", |
| "eligible_initializers": 49, |
| "analyzed_initializers": 48, |
| "external_initializers_skipped": 0, |
| "oversized_initializers_skipped": 1, |
| "extraction_failures": 0, |
| "max_array_size": 104857600 |
| }, |
| "rule_code": "S902", |
| "timestamp": 1777253494.5888064 |
| }, |
| { |
| "name": "Weight Distribution Anomaly Detection", |
| "status": "failed", |
| "message": "Layer 'onnx::LSTM_4158' has neurons with extremely large weight values", |
| "severity": "info", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "details": { |
| "layer": "onnx::LSTM_4158", |
| "affected_neurons": [ |
| 883 |
| ], |
| "total_affected": 1, |
| "num_extreme_weights": 1, |
| "threshold": 0.07031653076410294, |
| "max_weight": 0.07356292009353638, |
| "total_outputs": 3072, |
| "analysis_method": "structural_analysis" |
| }, |
| "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", |
| "rule_code": "S802", |
| "timestamp": 1777253496.968507 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json" |
| }, |
| "timestamp": 1777253499.612972 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json" |
| }, |
| "timestamp": 1777253499.613008 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", |
| "details": {}, |
| "timestamp": 1777253499.6130447 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777253500.0198393 |
| }, |
| { |
| "name": "Path Exists", |
| "status": "passed", |
| "message": "Path exists", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json" |
| }, |
| "timestamp": 1777253500.0290973 |
| }, |
| { |
| "name": "Path Readable", |
| "status": "passed", |
| "message": "Path is readable", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", |
| "details": { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json" |
| }, |
| "timestamp": 1777253500.029122 |
| }, |
| { |
| "name": "File Type Validation", |
| "status": "passed", |
| "message": "File type validation passed", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", |
| "details": {}, |
| "timestamp": 1777253500.029148 |
| }, |
| { |
| "name": "Template Extraction", |
| "status": "passed", |
| "message": "No Jinja2 templates found in file", |
| "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", |
| "details": { |
| "file_type": "tokenizer_config" |
| }, |
| "timestamp": 1777253500.0295625 |
| } |
| ], |
| "files_scanned": 7, |
| "assets": [ |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/LICENSE", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/README.md", |
| "type": "metadata", |
| "size": 1501 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", |
| "type": "manifest", |
| "size": 2179, |
| "keys": [ |
| "class_token_index", |
| "dropout", |
| "embed_ent_token", |
| "encoder_config", |
| "ent_token", |
| "fine_tune", |
| "fuse_layers", |
| "has_rnn", |
| "hidden_size", |
| "label_smoothing", |
| "loss_alpha", |
| "loss_gamma", |
| "loss_reduction", |
| "max_len", |
| "max_neg_type_ratio", |
| "max_types", |
| "max_width", |
| "model_name", |
| "model_type", |
| "name", |
| "neg_spans_ratio", |
| "num_post_fusion_layers", |
| "num_rnn_layers", |
| "post_fusion_schema", |
| "random_drop", |
| "represent_spans", |
| "sep_token", |
| "shuffle_types", |
| "span_loss_coef", |
| "span_mode", |
| "subtoken_pooling", |
| "token_loss_coef", |
| "transformers_version", |
| "vocab_size", |
| "words_splitter_type" |
| ] |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", |
| "type": "onnx", |
| "size": 664780382 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/special_tokens_map.json", |
| "type": "unknown" |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", |
| "type": "jinja2_template", |
| "size": 8332739 |
| }, |
| { |
| "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", |
| "type": "jinja2_template", |
| "size": 502 |
| } |
| ], |
| "has_errors": false, |
| "scanner_names": [ |
| "metadata", |
| "manifest", |
| "onnx", |
| "jinja2_template" |
| ], |
| "file_metadata": { |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE": { |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253121.948161, |
| "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/README.md": { |
| "file_size": 1501, |
| "license_info": [ |
| { |
| "spdx_id": "Apache-2.0", |
| "name": "Apache License 2.0", |
| "confidence": 0.8, |
| "source": "file_header", |
| "commercial_allowed": true |
| } |
| ], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253121.9582486, |
| "content_hash": "56f456d298e4d1804f8001b15d5aba267966c0f93ec60bc6529e997eb7a0ef09" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json": { |
| "file_size": 2179, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253121.9919474, |
| "root_type": "dict", |
| "keys": [ |
| "class_token_index", |
| "dropout", |
| "embed_ent_token", |
| "encoder_config", |
| "ent_token", |
| "fine_tune", |
| "fuse_layers", |
| "has_rnn", |
| "hidden_size", |
| "label_smoothing", |
| "loss_alpha", |
| "loss_gamma", |
| "loss_reduction", |
| "max_len", |
| "max_neg_type_ratio", |
| "max_types", |
| "max_width", |
| "model_name", |
| "model_type", |
| "name", |
| "neg_spans_ratio", |
| "num_post_fusion_layers", |
| "num_rnn_layers", |
| "post_fusion_schema", |
| "random_drop", |
| "represent_spans", |
| "sep_token", |
| "shuffle_types", |
| "span_loss_coef", |
| "span_mode", |
| "subtoken_pooling", |
| "token_loss_coef", |
| "transformers_version", |
| "vocab_size", |
| "words_splitter_type" |
| ], |
| "content_hash": "8b676dcb6dd22a876aa252b82d0a10795ea998d5200ef1dc005dde66b53ed7c7" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/model.onnx": { |
| "file_size": 664780382, |
| "file_hashes": { |
| "md5": "4e21d02cd05d9de8e79fc087a9bce991", |
| "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb", |
| "sha512": "331c56a8c538c67a332b15567d9630082117ad2b5e888bfb3d4aabf63626e6069c0f2f2f99b4806a52fba551f63380bad236d5070f338d104a47788674718d95" |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": false, |
| "is_model": true, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253497.524423, |
| "ir_version": 9, |
| "producer_name": "pytorch", |
| "node_count": 2661, |
| "scan_outcome": "inconclusive", |
| "scan_outcome_reasons": [ |
| "onnx_weight_distribution_analysis_incomplete" |
| ], |
| "layers_analyzed": 48, |
| "anomalies_found": 1, |
| "content_hash": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/special_tokens_map.json": { |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253497.5952823, |
| "content_hash": "ea97ecdbcc73713039d8d64dbb05e3689495c96657fbd9a18f5bed381be81049" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json": { |
| "file_size": 8332739, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253500.0238333, |
| "content_hash": "08bb5853718f4a829fa9ce773d7984f7f3f6a7073fdc82a07a382675c5061ba6" |
| }, |
| "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json": { |
| "file_size": 502, |
| "ml_context": { |
| "frameworks": {}, |
| "overall_confidence": 0.0, |
| "is_ml_content": false, |
| "detected_patterns": [], |
| "optimization_hints": [], |
| "file_type": "tokenizer_config", |
| "is_tokenizer": true, |
| "confidence": 2 |
| }, |
| "license_info": [], |
| "copyright_notices": [], |
| "license_files_nearby": [ |
| "/opt/sas/model-gli-text/models/pii-edge/LICENSE" |
| ], |
| "is_dataset": true, |
| "is_model": false, |
| "risk_score": 0.0, |
| "scan_timestamp": 1777253500.0306387, |
| "content_hash": "818c97fbc7f072800ccc379fd72e1e1b2506d30d7fd5bee8a5e4c8bd61bd805c" |
| } |
| }, |
| "content_hash": "e00a67772227f29d1395a119968e22570330b006f3eee84a5f78d8b3e36d74c3", |
| "start_time": 1777253120.9863985, |
| "duration": 379.0522165298462, |
| "total_checks": 24, |
| "passed_checks": 24, |
| "failed_checks": 0, |
| "success": false |
| } |
| } |
