Skip to content
Vraelis homeDocs
Join Us

Model folders

View as Markdown
Join UsGet Vraelis Prompto

Pin the exact bytes of an AI model folder with vraelis models, then verify it before you load, ship or share it.

vraelis models records the exact bytes of every file in a model folder (safetensors, GGUF, configs, tokenizer) and checks the folder's structure: truncated weights, bad GGUF headers, shard indexes naming missing shards, Git LFS pointers and invalid JSON.

Lock, then verifyBash
vraelis models lock   ./my-model        # writes ./my-model/modellock.json
vraelis models verify ./my-model        # Unchanged / Changed / Can't verify
vraelis models diff   approved.json new.json
vraelis models signature ./my-model --identity <expected signer> --issuer <OIDC issuer>   # optional, contacts Sigstore
CommandOptionWhat it does
lock--out OUTWrite the lockfile here instead of <folder>/modellock.json, leaving the folder untouched
lock--source SOURCEA free-text note, for example repo@revision
lock--strictRefuse to lock if the checker reports PROBLEM or ERROR (exit 3)
verify--lockfile LOCKFILECompare against this lockfile
all--jsonMachine-readable output

Verify names every file that changed, went missing or was added. The optional signature command checks a publisher's Sigstore signature against a signer you name, using OpenSSF model_signing 1.1.1; it is the only command that uses the network.

Last updated: October 24, 2026