The lineage behind 69% of open models was never verified. Cisco just fingerprinted almost 900 for free

Cisco has launched the AI Supply Chain Provenance Explorer, a public searchable database covering nearly 900 open AI models.

It uses fingerprinting from architecture metadata and weight-level signals, rather than relying on uploader-supplied base-model tags.

The database shows lineage, headquarters, license limits, and file-scan coverage to help teams verify models before deployment.

The report notes that provenance and malware-scan coverage on Hugging Face has been incomplete or inconsistent, underscoring supply-chain risk.