Llama-3.2-1B
A real read — offline against the base, never run. We read it and declined to call it: no matched benign reference resolved a verdict, so it is held, not cleared — never a clean bill of health.
◆ Vulcora read it — and declined to rule. No matched benign reference resolved a verdict, so it is held, not cleared
Vulcora reads the weights- model-signingOpenSSF / Sigstoreprovenance
reads Sigstore signature bundles
verifying a cryptographic provenance signature over model files; it can only attest what a publisher signed.
requires a published Sigstore bundle; no scanned model ships one
1 off-the-shelf tool could read this model’s serialized files, and none flagged it. None of them reads what the weights mean: they hunt load-time code-execution, repo smells, or a provenance signature — real jobs, none of which is weight-level tampering. 3 other tools had nothing of the kind they read here. Vulcora read the weights and declined to rule — held, not cleared.
Deeper readings
the full disposition & integrity reads — worth cravingDetails
from the artifact’s public metadata- Architecture
- Llama
- Downloads
- 2.1M
- License
- see model card
Think this verdict is wrong?
Signed-in users can formally refute a read — Vulcora re-reads the model against your claim and records the outcome. You'll need an account to file one.
Refutations are actor-gated — a guest can't file one.
Want a verdict you can prove — on your own model?