Checkpoint provenance is mostly unverified

Signed checkpoints exist and are seldom verified. In an informal survey of deployment pipelines, the majority downloaded weights over TLS and treated that as sufficient assurance of origin.

Pinning a hash costs one line and closes the gap between the model you evaluated and the model you serve.