ModelProof: Proving an AI Model Hasn't Been Tampered With, Stored Forever on Arweave
TL;DR: ModelProof hashes any AI model in your browser, signs a provenance manifest with Ed25519 and stores it permanently on Arweave for free, so anyone can later prove a copy of the weights is authentic, or see exactly which chunks were changed.
I'm Lawal Ridwan, a frontend and web3 developer from Nigeria. Most of the models I run are ones I downloaded: a GGUF from a mirror, a fine-tune a friend shared on Telegram, an ONNX export someone uploaded "with fixes". Every time, I'm trusting a filename, and I don't like that.
So for the HackerNoon Decentralize AI Hackathon I built ModelProof, a small open-source PWA that gives AI weights the kind of provenance we already expect from software releases, with no server in the middle.
- Live app: https://ridwanlawala.github.io/modelproof/
- Code (MIT): https://github.com/Ridwanlawala/modelproof
The problem: weights are just bytes, and bytes move
There are three ways things go wrong today.
- ...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE