{ "tool": "modelaudit", "tool_version": "0.2.40", "scanned_at": "2026-04-27T01:31:40Z", "files": { "model.onnx": { "size_mb": 664.8, "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb" } }, "audit": { "bytes_scanned": 673129355, "issues": [ { "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 49, "analyzed_initializers": 48, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "timestamp": 1777253494.588947, "type": "onnx_check", "rule_code": "S902" }, { "message": "Layer 'onnx::LSTM_4158' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "layer": "onnx::LSTM_4158", "affected_neurons": [ 883 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.07031653076410294, "max_weight": 0.07356292009353638, "total_outputs": 3072, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "timestamp": 1777253496.9685366, "type": "onnx_check", "rule_code": "S802" } ], "checks": [ { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/README.md" }, "timestamp": 1777253121.9529808 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/README.md" }, "timestamp": 1777253121.9530113 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-edge/README.md", "details": {}, "timestamp": 1777253121.9530468 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json" }, "timestamp": 1777253121.9889367 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json" }, "timestamp": 1777253121.9889696 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", "details": {}, "timestamp": 1777253121.9889998 }, { "name": "Model Name Policy Check", "status": "passed", "message": "Model Name Policy Check completed successfully", "location": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", "details": { "component_count": 2 }, "timestamp": 1777253121.990232 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx" }, "timestamp": 1777253122.0267172 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx" }, "timestamp": 1777253122.0267603 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": {}, "timestamp": 1777253122.026787 }, { "name": "File Integrity Hash", "status": "passed", "message": "File integrity hashes calculated", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "md5": "4e21d02cd05d9de8e79fc087a9bce991", "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb", "sha512": "331c56a8c538c67a332b15567d9630082117ad2b5e888bfb3d4aabf63626e6069c0f2f2f99b4806a52fba551f63380bad236d5070f338d104a47788674718d95", "file_size": 664780382 }, "timestamp": 1777253125.408813 }, { "name": "JIT/Script Code Execution Detection", "status": "passed", "message": "No JIT/Script code execution risks detected", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": {}, "timestamp": 1777253492.9776785 }, { "name": "Network Communication Detection", "status": "passed", "message": "No network communication patterns detected", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": {}, "timestamp": 1777253492.977827 }, { "name": "Custom Operator Domain Check", "status": "passed", "message": "All operators use standard ONNX domains", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "safe_nodes": 2661 }, "timestamp": 1777253492.9906225 }, { "name": "Python Operator Detection", "status": "passed", "message": "No Python operators detected", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "nodes_checked": 2661 }, "timestamp": 1777253492.9906573 }, { "name": "Tensor Size Validation", "status": "passed", "message": "Tensor Size Validation completed successfully", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx (tensor: core.token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", "details": { "component_count": 121 }, "timestamp": 1777253494.400935 }, { "name": "Weight Distribution Analysis Coverage", "status": "failed", "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 49, "analyzed_initializers": 48, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "rule_code": "S902", "timestamp": 1777253494.5888064 }, { "name": "Weight Distribution Anomaly Detection", "status": "failed", "message": "Layer 'onnx::LSTM_4158' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "details": { "layer": "onnx::LSTM_4158", "affected_neurons": [ 883 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.07031653076410294, "max_weight": 0.07356292009353638, "total_outputs": 3072, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "rule_code": "S802", "timestamp": 1777253496.968507 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json" }, "timestamp": 1777253499.612972 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json" }, "timestamp": 1777253499.613008 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", "details": {}, "timestamp": 1777253499.6130447 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777253500.0198393 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json" }, "timestamp": 1777253500.0290973 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json" }, "timestamp": 1777253500.029122 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", "details": {}, "timestamp": 1777253500.029148 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777253500.0295625 } ], "files_scanned": 7, "assets": [ { "path": "/opt/sas/model-gli-text/models/pii-edge/LICENSE", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/pii-edge/README.md", "type": "metadata", "size": 1501 }, { "path": "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json", "type": "manifest", "size": 2179, "keys": [ "class_token_index", "dropout", "embed_ent_token", "encoder_config", "ent_token", "fine_tune", "fuse_layers", "has_rnn", "hidden_size", "label_smoothing", "loss_alpha", "loss_gamma", "loss_reduction", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "neg_spans_ratio", "num_post_fusion_layers", "num_rnn_layers", "post_fusion_schema", "random_drop", "represent_spans", "sep_token", "shuffle_types", "span_loss_coef", "span_mode", "subtoken_pooling", "token_loss_coef", "transformers_version", "vocab_size", "words_splitter_type" ] }, { "path": "/opt/sas/model-gli-text/models/pii-edge/model.onnx", "type": "onnx", "size": 664780382 }, { "path": "/opt/sas/model-gli-text/models/pii-edge/special_tokens_map.json", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json", "type": "jinja2_template", "size": 8332739 }, { "path": "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json", "type": "jinja2_template", "size": 502 } ], "has_errors": false, "scanner_names": [ "metadata", "manifest", "onnx", "jinja2_template" ], "file_metadata": { "/opt/sas/model-gli-text/models/pii-edge/LICENSE": { "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253121.948161, "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" }, "/opt/sas/model-gli-text/models/pii-edge/README.md": { "file_size": 1501, "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253121.9582486, "content_hash": "56f456d298e4d1804f8001b15d5aba267966c0f93ec60bc6529e997eb7a0ef09" }, "/opt/sas/model-gli-text/models/pii-edge/gliner_config.json": { "file_size": 2179, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253121.9919474, "root_type": "dict", "keys": [ "class_token_index", "dropout", "embed_ent_token", "encoder_config", "ent_token", "fine_tune", "fuse_layers", "has_rnn", "hidden_size", "label_smoothing", "loss_alpha", "loss_gamma", "loss_reduction", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "neg_spans_ratio", "num_post_fusion_layers", "num_rnn_layers", "post_fusion_schema", "random_drop", "represent_spans", "sep_token", "shuffle_types", "span_loss_coef", "span_mode", "subtoken_pooling", "token_loss_coef", "transformers_version", "vocab_size", "words_splitter_type" ], "content_hash": "8b676dcb6dd22a876aa252b82d0a10795ea998d5200ef1dc005dde66b53ed7c7" }, "/opt/sas/model-gli-text/models/pii-edge/model.onnx": { "file_size": 664780382, "file_hashes": { "md5": "4e21d02cd05d9de8e79fc087a9bce991", "sha256": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb", "sha512": "331c56a8c538c67a332b15567d9630082117ad2b5e888bfb3d4aabf63626e6069c0f2f2f99b4806a52fba551f63380bad236d5070f338d104a47788674718d95" }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": false, "is_model": true, "risk_score": 0.0, "scan_timestamp": 1777253497.524423, "ir_version": 9, "producer_name": "pytorch", "node_count": 2661, "scan_outcome": "inconclusive", "scan_outcome_reasons": [ "onnx_weight_distribution_analysis_incomplete" ], "layers_analyzed": 48, "anomalies_found": 1, "content_hash": "396edfc891b876b0b291192036e2cb3db89ec6ed7857afffab6e3b8ab72be5fb" }, "/opt/sas/model-gli-text/models/pii-edge/special_tokens_map.json": { "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253497.5952823, "content_hash": "ea97ecdbcc73713039d8d64dbb05e3689495c96657fbd9a18f5bed381be81049" }, "/opt/sas/model-gli-text/models/pii-edge/tokenizer.json": { "file_size": 8332739, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253500.0238333, "content_hash": "08bb5853718f4a829fa9ce773d7984f7f3f6a7073fdc82a07a382675c5061ba6" }, "/opt/sas/model-gli-text/models/pii-edge/tokenizer_config.json": { "file_size": 502, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-edge/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253500.0306387, "content_hash": "818c97fbc7f072800ccc379fd72e1e1b2506d30d7fd5bee8a5e4c8bd61bd805c" } }, "content_hash": "e00a67772227f29d1395a119968e22570330b006f3eee84a5f78d8b3e36d74c3", "start_time": 1777253120.9863985, "duration": 379.0522165298462, "total_checks": 24, "passed_checks": 24, "failed_checks": 0, "success": false } }