Lesson 7 of 10 · 5 min read

Model Registries and Promotion Pipelines

A model registry is the supply-chain choke point for AI systems: whatever is promoted there reaches production, and models are executable artifacts that have carried code. Securing it means separating the roles that upload, approve, promote and deploy; ingesting external models by pinned commit into quarantine; scanning with tools that fail closed, since scanners have been bypassed; converting to safe formats in isolation; evaluating and signing; and deploying only by digest through an admission policy that checks signatures and a revocation list. Lineage then lets a later finding be traced to every deployment.