# Model folders

Pin the exact bytes of an AI model folder with vraelis models, then verify it before you load, ship or share it.

`vraelis models` records the exact bytes of every file in a model folder (safetensors, GGUF, configs, tokenizer) and checks the folder's structure: truncated weights, bad GGUF headers, shard indexes naming missing shards, Git LFS pointers and invalid JSON.

Lock, then verify:

```bash
vraelis models lock   ./my-model        # writes ./my-model/modellock.json
vraelis models verify ./my-model        # Unchanged / Changed / Can't verify
vraelis models diff   approved.json new.json
vraelis models signature ./my-model --identity <expected signer> --issuer <OIDC issuer>   # optional, contacts Sigstore
```

| Command | Option | What it does |
| --- | --- | --- |
| lock | `--out OUT` | Write the lockfile here instead of `<folder>/modellock.json`, leaving the folder untouched |
| lock | `--source SOURCE` | A free-text note, for example `repo@revision` |
| lock | `--strict` | Refuse to lock if the checker reports PROBLEM or ERROR (exit 3) |
| verify | `--lockfile LOCKFILE` | Compare against this lockfile |
| all | `--json` | Machine-readable output |

Verify names every file that changed, went missing or was added. The optional `signature` command checks a publisher's Sigstore signature against a signer you name, using OpenSSF model_signing 1.1.1; it is the only command that uses the network.

---

Vraelis documentation, Products. https://docs.vraelis.com/prompto-models