izm1chael commited on
Commit
7fc9989
Β·
verified Β·
1 Parent(s): 027d628

Update README.md

Browse files
Files changed (1) hide show
  1. README.md +0 -102
README.md CHANGED
@@ -8,16 +8,6 @@ pinned: false
8
  license: mit
9
  short_description: 'Security admission and adversarial test corpus for local AI '
10
  ---
11
- LayerFault
12
-
13
- Security admission for local AI models.
14
-
15
- LayerFault is an offline-first security scanner and admission layer for AI models, model packages, repositories and runtimes.
16
-
17
- This Hugging Face organisation hosts the LayerFault Security Corpus, a growing adversarial test corpus for validating AI model security scanners, admission controls and model-handling pipelines.
18
-
19
- These repositories are security test fixtures, not models intended for inference.
20
-
21
 
22
  ## LayerFault Security Corpus
23
 
@@ -45,95 +35,3 @@ Coverage includes:
45
 
46
  The corpus is organised into Hugging Face Collections so individual security domains can be explored and tested independently.
47
 
48
- ---
49
-
50
- ## Why LayerFault exists
51
-
52
- A modern model repository can contain much more than weights.
53
-
54
- ```text
55
- Model Repository
56
- β”œβ”€β”€ weights
57
- β”œβ”€β”€ configuration
58
- β”œβ”€β”€ tokenizer
59
- β”œβ”€β”€ templates
60
- β”œβ”€β”€ Python code
61
- β”œβ”€β”€ native libraries
62
- β”œβ”€β”€ serialized objects
63
- β”œβ”€β”€ scripts
64
- └── dependency metadata
65
- ```
66
-
67
- These components can introduce conventional software security risks before a single inference request is made.
68
-
69
- LayerFault places an admission boundary between acquiring a model and allowing it into an environment.
70
-
71
- ```text
72
- MODEL ACQUISITION
73
- β”‚
74
- β–Ό
75
- LAYERFAULT
76
- β”‚
77
- β”œβ”€β”€ structure
78
- β”œβ”€β”€ serialization
79
- β”œβ”€β”€ package contents
80
- β”œβ”€β”€ integrity
81
- β”œβ”€β”€ provenance
82
- β”œβ”€β”€ policy
83
- └── runtime exposure
84
- β”‚
85
- β–Ό
86
- PASS / WARN / BLOCK
87
- β”‚
88
- β–Ό
89
- INFERENCE
90
- ```
91
-
92
- ---
93
-
94
- ## Security Notice
95
-
96
- Repositories published by this organisation may be intentionally adversarial.
97
-
98
- Fixtures can contain synthetic examples of executable code, unsafe serialization constructs, malformed metadata, suspicious archive structures, malicious looking scripts or other behaviours that security tooling is expected to detect.
99
-
100
- They are intended for:
101
-
102
- - defensive security research
103
- - scanner validation
104
- - regression testing
105
- - detector development
106
- - model admission research
107
-
108
- Do not treat corpus repositories as production models.
109
-
110
- Do not execute arbitrary fixture contents outside an appropriately isolated testing environment.
111
-
112
- ---
113
-
114
- ## Security Boundaries
115
-
116
- LayerFault can establish security properties about model artifacts, packages, provenance, runtimes and admission policy.
117
-
118
- Static inspection cannot prove that arbitrary learned weights are free from semantic backdoors, hidden triggers or malicious learned behaviour.
119
-
120
- LayerFault therefore keeps artifact security, runtime security and behavioural analysis as distinct guarantees.
121
-
122
- ---
123
-
124
- ## Corpus Purpose
125
-
126
- The LayerFault Security Corpus exists to make model security testing:
127
-
128
- - reproducible
129
- - comparable
130
- - regression friendly
131
- - transparent
132
- - easier to automate
133
-
134
- The corpus is designed to evolve alongside new model formats, packaging methods, runtime behaviours and attack techniques.
135
-
136
- ---
137
-
138
- **Know what you are admitting. Know whether it changed. Know who attested to it. Block execution when those guarantees fail.**
139
-
 
8
  license: mit
9
  short_description: 'Security admission and adversarial test corpus for local AI '
10
  ---
 
 
 
 
 
 
 
 
 
 
11
 
12
  ## LayerFault Security Corpus
13
 
 
35
 
36
  The corpus is organised into Hugging Face Collections so individual security domains can be explored and tested independently.
37