By Mirko Zorz
Publication Date: 2026-04-30 13:00:00
Enterprises pulling models from Hugging Face and other open repositories rarely keep records of how those models are altered after download, leaving organizations with little ability to confirm what they are running in production. The State of AI Security 2026 from Cisco places this level of access inside a growing pattern of AI-driven operations that connect directly to core business systems, and identifies AI supply chain exposure as a recurring risk.
Cisco has published the Model Provenance Kit, an open-source Python toolkit and command-line interface that determines whether two transformer models share a common origin by examining architecture metadata, tokenizer structure, and the learned weights themselves.
Why model lineage has become difficult to verify
Hugging Face hosts more than 2 million models. Documentation on open repositories can be falsified, metadata can be stripped or edited, and a model card claiming a model was trained from scratch may describe a…
