OpenSSF Model Signing (OMS) specification
Specification and reference implementation for cryptographically signing machine-learning models with Sigstore
Defines how to sign model artefacts and verify their integrity and origin using Sigstore, giving AI supply chains the equivalent of software signing; adopted by Hugging Face, NVIDIA and Google for model distribution.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.
