●THE RUNWAY PRODUCT — OPEN NOW

The deepest read on one model, signed.

Hand Protora one model — an open finetune you depend on, one you built, or a base↔finetune pair. It runs the deepest detection pass at full depth and returns one signed, replayable dossier: what the finetune did, proof that each finding holds, and an honest list of everything it could not prove.

Request an audit See the public record

OPEN NOW · SIGNED DOSSIER

One model in — the deepest read out, signed, with an honest list of everything it could not prove.

OPEN NOW

●WHAT IT IS

One model in. A signed dossier out.

A company or lab hands Protora one model, once. It runs the deepest DETECT pass at full depth and delivers a single consolidated artifact behind a thin login portal: the recipe fingerprint, what the finetune did versus its base, any undisclosed or backdoor behavior, the per-finding replayable witnesses, and an explicit account of everything it abstained on.

The deliverable is a signed compliance dossier — an evidence artifact built for the model-documentation, evaluation, and provenance obligations of the EU AI Act and NIST. See how it maps →

This is the lowest-infrastructure surface — detect, deliver, a thin portal; no monitoring fleet, no in-loop hooks. That is exactly why it is the runway: earned credibility delivered as a repeatable, signed audit on today’s resources. Talk to us about an audit →

Building on it

A company about to build on an open finetune, wanting to know exactly what it’s inheriting before it commits.

Shipping it

A team that finetuned a model and must document what changed before it ships.

Approving it

A model-risk or compliance function that must produce a documented evaluation before a model is approved or deployed.

●WHAT YOU GET

Seven things, in one living artifact.

The detection. Recipe fingerprint, what the finetune did versus its base, any undisclosed behavior — at full depth.
Per-finding witnesses. Every finding links to its own replayable demonstration; nothing is asserted without one.
The abstain register. A complete, honest list of what could not be proven, each entry with its reason.
A published fidelity ceiling. Stamped with the engine version used — honest, and never exceeded.
The compliance dossier. The signed evidence artifact, mapped to the regulatory obligations.
A reusable portal. The deliverable is a living artifact behind a thin login, not a one-off PDF.
A remediation on-ramp. Anything the audit flags is a candidate for the Corrective Patch TRUST-GATED — where only the removed behavior changes, to the stated coverage. Detect names the harm; excise is the on-ramp that removes it.

●THE DEEP READ, MEASURED

Each capability the pass sells carries a graded receipt.

Coverage is stamped per receipt. The safety-strip read spans three architecture families (Qwen, Llama, Gemma-2) across six vendors, 0.5B–9B (streamed memory-flat at 8B/9B); provenance, held-out prediction, and backdoor detection remain single-family (SmolLM2 / Llama). All are small-battery and mechanism-proven; broader-family and live-scale runs are staged, and the ceiling is stamped on the dossier. Pick a capability to read its receipt.

Safety-strip detection, harm-free and architecture-robust

● CAUGHT FROM THE WEIGHTS

The deep pass catches a safety-removed (“abliterated”) finetune directly from its weights, without eliciting any harmful behavior, and it fires across all three architecture families it was tested against. It does not false-fire on a benign finetune, on a genuine benign adapter that edits the very same weights, or on an adversarial finetune built to look like the tampering.

0.92–0.96refusal rate, before→0.00after the strip — the harmheldbenign · adapter · adversarial controls

The behavioral witnesses replay in the public record. Read them →

●WHY IT’S A PRODUCT, NOT A FAVOR

A productized audit, not bespoke consulting.

The value is the same repeatable flow every time — not a founder-favor. The runway is real only if the audit is a repeatable motion: the exit gate is a handful of audits closed through the same pipeline, each needing no bespoke hand-holding.

●THE REPEATABLE MOTION

intake → detect → dossier → portal

One model in at intake. The deep detection pass at full depth. A signed dossier out. A reusable portal that stays live.

●THE GATES — BY RULE, NOT BY MOOD

The abstain register is part of the deliverable, not an appendix.

Inferred findings are labeled and confidence-scored; proven findings carry witnesses. The two are never blurred.

The ceiling is computed from graded outcomes and stamped with the engine version — honest, and never exceeded.

The dossier is evidence a regulator can trust.

Bring the one model
you can’t vouch for.

One deep pass, at full depth. Protora will tell you what the finetune did, prove each finding with a replayable witness, and hand you a signed dossier — with an honest list of everything it couldn’t prove.