Model Safety & Download Verification | Arc en Ciel

Current Production Inventory Snapshot

Generated from the production Version table at request time. This is a transparency snapshot, not a third-party audit.

Every normal download path now fails closed: only a CLEAN local verification result is delivery eligible. Pending, unscanned, external-only, legacy-risk, infected, and scan-error references remain blocked.

• Reviewer summary: 100.00% of currently delivery-eligible model-weight references use structurally validated non-pickle formats; 16,263 version references are locally verified and eligible; 0 remain blocked by the mandatory verification gate.
• Mandatory verification gate: 100.00% of currently delivered version files have CLEAN local verification evidence. Non-CLEAN references are not eligible for normal delivery.
• Mutually exclusive source mix: 16,079 local-only references, 183 locally hosted references with an external provenance or mirror URL, and 1 external-only references.
• External reference transparency: 0 references remain UNVERIFIED_EXTERNAL and are blocked from normal delivery until a local copy passes verification.
• Format mix: 16,175 safetensors references, 14 validated-graph ONNX references, and 0 legacy pickle-capable references (.ckpt, .pt, .pth).
• Inventory non-pickle share: 100.00% of known model-weight references; delivery-eligible non-pickle share: 100.00%.
• Legacy delivery: 0 legacy pickle-capable model-weight references are currently delivery eligible.
• Blocked delivery: 0 version references are blocked because their status is not CLEAN.
• Hash coverage: 16,263 downloadable version references have SHA-256 hashes; 16,175 have WebUI/AutoV3 hashes.
• Raw scan status distribution: UNSCANNED=0, PENDING=0, CLEAN=16,263, POTENTIALLY_RISKY=0, INFECTED=0, SCAN_ERROR=0, UNVERIFIED_EXTERNAL=0.
• Review note: CLEAN requires policy evidence; source provenance, format validation, full-file integrity, and delivery eligibility are reported separately.
• Total downloadable version references counted: 16,263.

Reviewer Summary

• Open the linked live production snapshot first: validated non-pickle share, legacy pickle-capable count, blocked delivery count, hosted-file hash coverage, and external-reference count are the primary signals.
• 100% of normal model-file deliveries pass the mandatory CLEAN gate; all non-CLEAN states are blocked.
• UNSCANNED and PENDING are internal processing states and are not delivery eligible.
• External URL references that Arc en Ciel does not host locally are surfaced as UNVERIFIED_EXTERNAL and remain blocked until a local copy passes verification.

Download Safety Policy

• Arc en Ciel prefers safetensors for generative model-weight delivery and uses self-contained ONNX for compatible segmentation models; file hashes are exposed where available.
• Structurally validated non-pickle formats account for 100% of model-weight files currently eligible for normal delivery; any future legacy .ckpt, .pt, or .pth reference remains blocked for isolated review.
• Local files receive SHA-256 hashing and format-specific structural validation; safetensors additionally receive WebUI/AutoV3 hash storage where possible.
• Pickle-capable model uploads receive ClamAV and restricted PyTorch checks but are not direct-delivery eligible merely because a restricted load succeeds.
• Only CLEAN scan status is eligible for normal download delivery; every other status is blocked.
• External-only references remain UNVERIFIED_EXTERNAL and blocked until local verification succeeds.

How To Read Scan Statuses

• CLEAN means the local file passed the configured scan/validation flow.
• UNSCANNED and PENDING are processing states and remain blocked until verification completes.
• UNVERIFIED_EXTERNAL marks an external-only reference that Arc en Ciel cannot verify locally and is therefore blocked.
• INFECTED, POTENTIALLY_RISKY, and SCAN_ERROR are blocked statuses for normal download delivery.

Verification Links

These pages are linked as first-class crawl targets so reviewers do not need to infer model-safety claims from footer links alone.

• Live production inventory snapshot Current server-rendered format, source, hash, and scan-status counts from the production Version table.
• Technical Security Security controls, account protection, payment handling, and Link Key context.
• API docs Public OpenAPI documentation for supported download and metadata flows.
• Security.txt Machine-readable vulnerability disclosure contact and policy file.