Distribution
One integration, an entire catalog
Attest the whole catalog from a single integration. Every attestation on a public model page is a compounding advertisement — the model-world analog of a badge in every README.
●PLATFORM INTEGRITY — PARTNER
The attestation layer
for a whole hub.
The seven direct surfaces sell the read one model at a time — to the model’s consumer. The platform layer sells it once, to the host that serves them all, and reaches every consumer downstream.
PARTNER — PLATFORM INTEGRATION
PARTNER · CHECKED BY PROTORA
Sell the read once, to the host that serves every model — a witnessed, coverage-bounded attestation on each model page, never “certified safe.”
PARTNERWhy the hub is the buyer
A model hub — any platform hosting thousands of open finetunes — has a native integrity problem: it serves models it did not train, whose behavior it cannot vouch for, any one of which could carry a backdoor its uploader never disclosed. Protora integrates so that every model it serves can carry an attestation — DETECT run at or after upload, ATTEST published alongside the model, EXCISE offered as the remediation when something is found. It is the model-world analog of a security posture on an app store.
The right buyer
The liability already sits here
The platform carries the reputational and, increasingly, the regulatory liability for what it serves. Catalog-wide attestation is a defensible platform investment, not a per-user upsell.
The flywheel
Attestation becomes infrastructure
Attested models raise the trust bar for the whole hub, which pulls more serious builders, which makes attestation more valuable. Protora becomes infrastructure.
What the platform gets
One integration into the serve path turns a per-model audit into a platform-integrity layer — batch for the catalog that already exists, incremental for everything uploaded next.
Serve-time
Attestation wired into the path
DETECT and ATTEST run on the upload and serve path — batch across the existing catalog, incremental for every new upload.
Public surface
A mark for the model page
A “checked by Protora” mark plus the signed, replayable attestation on the model page — coverage-bounded and witnessed, never “certified safe.”
Remediation
A finding is a fix, not a takedown
EXCISE is offered to an uploader whose model is flagged — so a hosted model can be repaired in place instead of pulled.
Dashboard
Catalog integrity at a glance
Coverage, findings, and open backdoors across the hub — the platform’s analog of portfolio analytics.
The read a hub is uniquely built for
A hub holds exactly what the hardest read needs: a base, and a clean reference, for the finetunes it serves. That is the setting where a witnessed backdoor read is possible at all — the full receipt lives on the audit read.
Base + clean reference — the hub holds both
● WITNESSED DETECTIONA single model-versus-real read of a planted backdoor sits at chance — there is nothing to compare against. In the reference / differential setting the hidden behavior is surfaced as a witnessed detection, even at 1.5–3% of everything the finetune changed. The hub is where that differential is native, which is what lets a catalog attestation carry a witnessed backdoor read rather than a guess.
chancesingle model-versus-real read — no reference
→1.5–3%of everything the finetune changed — surfaced as a witnessed detection in the reference / differential setting
Honest scope — a detection signal, not a claim to have pinpointed the mechanism; a causal localization claim tested confounded, and does not ship. Without a reference, it abstains.
The badge is honest — or it does not ship
Publishing a mark on every model is powerful. One rule holds the line: an honest badge is the entire point, and a false one would burn the whole hub’s trust, and ours. So the mark states its coverage, shows its fidelity ceiling, and never pretends to more.
The mark saysThe mark never says
checked by protoracertified safe
assurance against drift and poisoningno backdoors
coverage-bounded · witnessedguaranteed clean
shows the fidelity ceilingprovably identical
Responsible disclosure governs any backdoor found in a hosted public model — maintainer-first, embargoed — before it ever surfaces on a public page.
Host the models.
Attest the whole catalog.
If you run a hub for finetuned models, Protora integrates so every model you serve can carry a witnessed, coverage-bounded attestation on its model page. Bring the platform; we’ll scope the integration.
Every engagement is scoped per case and quoted per offer — tell us what you need, and we’ll scope it and send you an offer.