Verifiable Model Record

An open standard

A signed record of what an AI model is, and who stands behind it.

Anyone can check a Verifiable Model Record (VMR) offline, against the issuer keys they choose to trust. No network, no account, no vendor in the middle.

What a record states

A record carries hashes and signed claims, never the model's weights or its training data.

The model
Its files, each identified by a cryptographic hash.
Its training input
Committed by hash, so it can be matched later without being revealed, or stated as not disclosed.
Its lineage
The models it was built from, and how: fine-tuned, adapted, merged, quantized or distilled.
Its environment
The hardware and software it was produced with, by hash.
Its issuer
Who signed the record, and when.

Checked by anyone, offline

A verifier checks a record's structure, its signature, and whether the issuer's key is one the verifier has chosen to trust. It needs no network connection and no account, and it names the check a record fails.

Graded against the rules that apply

Policy packs are machine-readable rule sets. A pack grades a verified record rule by rule against the laws and standards it cites, and each rule answers compliant, non-compliant or indeterminate, with the clause it encodes.

Whose rules they are is your choice. A regulator, an auditor or your own compliance team can publish a pack, sign it, and have people trust their key rather than KHALM's; the five reference packs are only the reading KHALM offers, and checking any pack's result is free.

A "compliant" answer means the record passes that pack's rule, on what the record declares. It is not a legal finding, and reference packs are not legal advice.

The five reference packs, rule by rule.

For any AI model

VMR is designed for any AI model, from any vendor, whose weights the issuer holds. Only a party that holds a model's weights can issue a truthful record for it.

Status