MoroAILocal-First
Compliance & Audit

Release Governance & Cryptographic SBOM

Auditable model provenance binding data, recipes, evaluations, and weights into an immutable Software Bill of Materials.

Cryptographic Bill of Materials (SBOM)

Regulated industries cannot deploy black-box models without proof of training lineage. MoroAI automatically generates a signed JSON manifest for every release candidate: 

{
  "release_id": "rel_2026_09_28_01",
  "model_name": "moro-enterprise:v1.0.0",
  "provenance": {
    "dataset_sha256": "8f3b2049e0c19a0a...",
    "recipe_sha256": "44ea1041b8a9018f...",
    "base_model": "Qwen/Qwen2.5-1.5B",
    "checkpoint_sha256": "d9810a9c72e19a0f..."
  },
  "evaluation_gate": {
    "passed": true,
    "deterministic_rule_pass_rate": 1.0,
    "drift_score_wasserstein": 0.021,
    "eval_signature": "sig_rsa4096_d892a01"
  }
}

Verifying a Model

moro release verify --release-id rel_2026_09_28_01
← DPO Flywheel Cookbook Overview