Skip to content
Courses/AI security and evaluation/Model and dataset supply chain

Model and dataset supply chain

Your AI app inherits trust from everything it downloads: model, tokenizer, dataset, LoRA, npm package, Docker image, workflow, script, and extension.

  • Create a provenance record for models and datasets.
  • Avoid uncontrolled weights, scripts, and dependencies.
  • Treat license, security, and quality as separate decisions.

Provenance record

Terminal
modelo:
  nombre: "qwen3-8b"
  fuente: "official repository"
  version_o_commit: "..."
  licencia: "reviewed"
  formato: "gguf | safetensors | onnx"
  hash: "sha256:..."
  requiere_trust_remote_code: false
  datos_entrenamiento_conocidos: partial
  uso_permitido: "educational | commercial | review"
  fecha_revision: "2026-07-03"

Simple rules

  • Prefer formats that do not execute code when loading weights.
  • Avoid trust_remote_code unless you review exactly what it executes.
  • Store hashes of weights used in production.
  • Do not mix private and public datasets without logging.
  • Review model, dataset, and adapter licenses separately.
Terminal
sha256sum modelo.gguf > checksums.txt
pip freeze > requirements.lock.txt
npm ls --depth=0 > npm-deps.txt
docker image inspect qdrant/qdrant:latest > docker-qdrant.json
Complete Aulafy mapSee how this lesson fits without leaving your path.

Complete Aulafy map

How all courses connect

This is not a checklist. Start with the foundation, choose an outcome, and go deeper only when your project needs more control.

  1. 1Understand
  2. 2Apply or build
  3. 3Operate with confidence
01

Choose an application

Turn the foundation into a visible outcome: a website, a business improvement, media, or an interactive experience.

Continue into the technical branch when you need to maintain code, data, or infrastructure.

02

Build with code

Prepare your environment, work with coding agents, and run models while keeping control of your projects.

This branch prepares you to design and operate reliable AI systems.

03

Take systems to production

Combine retrieval, agents, evaluation, security, deployment, and model adaptation when the problem requires it.

You do not need every course: choose the component your system needs and return as it grows.

View full catalogue